What’s Vulnerable › Products

Payment Plugins for PayPal WooCommerce vulnerabilities

4 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your Payment Plugins for PayPal WooCommerce version is affected

Latest Payment Plugins for PayPal WooCommerce vulnerabilities

• CVE-2026-80342 — Payment Plugins for PayPal WooCommerce < 2.0.27 - Unauthenticated Payment Hijacking via Unvalidated PayPal Order ID (CVSS 6.5)
• CVE-2026-80341 — Payment Plugins for PayPal WooCommerce < 2.0.26 - Subscriber+ Stored Payment Method Assignment via IDOR (CVSS 5.9)
• CVE-2026-80340 — Payment Plugins for PayPal WooCommerce < 2.0.26 - Unauthenticated Customer PII Disclosure via order-pay (CVSS 5.3)
• CVE-2026-13399 — Payment Plugins for PayPal WooCommerce < 2.0.20 - Unauthenticated Payment Bypass via Reuse of a Completed PayPal Order (CVSS 7.5)