What’s Vulnerable › Products

Mercado Pago payments for WooCommerce vulnerabilities

3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your Mercado Pago payments for WooCommerce version is affected

Latest Mercado Pago payments for WooCommerce vulnerabilities

• CVE-2026-28180 — WordPress Mercado Pago payments for WooCommerce plugin <= 8.9.0 - Insecure Direct Object References (IDOR) vulnerability (CVSS 5.3)
• CVE-2026-3208 — Mercado Pago payments for WooCommerce <= 8.7.11 - Missing Authorization to Unauthenticated PIX Payment QR Code Image Disclosure (CVSS 5.3)
• CVE-2022-45068 — WordPress Mercado Pago payments for WooCommerce Plugin <= 6.3.1 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 8.8)