What’s Vulnerable › Products

Automattic WooPayments – Fully Integrated Solution Built and Supported by Woo vulnerabilities

5 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 0 published in the last 12 months.

Check whether your Automattic WooPayments – Fully Integrated Solution Built and Supported by Woo version is affected

Latest Automattic WooPayments – Fully Integrated Solution Built and Supported by Woo vulnerabilities

• CVE-2023-51503 — WordPress WooCommerce Payments Plugin <= 6.6.2 is vulnerable to Insecure Direct Object References (IDOR) (CVSS 7.5)
• CVE-2023-35916 — WordPress WooCommerce Payments Plugin <= 5.9.0 is vulnerable to Insecure Direct Object References (IDOR) (CVSS 7.5)
• CVE-2023-35915 — WordPress WooCommerce Payments Plugin <= 5.9.0 is vulnerable to SQL Injection (CVSS 9.8)
• CVE-2023-49828 — WordPress WooCommerce Payments Plugin <= 6.4.2 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.4)
• CVE-2023-28121 — (CVSS 9.8)