WordPress Vulnerability Scanner WPSec
Vulnerabilities / PayPlug for WooCommerce (Official)

PayPlug for WooCommerce (Official) vulnerabilities

Advisories WPSec published for PayPlug for WooCommerce (Official). Other sources may list more. Its attack surface: PayPlug for WooCommerce (Official) on WPSec AttackSurface.

PublishedIDVulnerabilitySeverityFixed in
2026-10-21 WPSEC-2026-1341 PayPlug for WooCommerce (Official) <= 3.1.0 - Cross-Site Request Forgery to Payment Settings Change and PayPlug Account Connection via payplug_api REST Routes Medium 6.5 3.1.1
2026-10-21 WPSEC-2026-1340 PayPlug for WooCommerce (Official) <= 3.1.0 - Unauthenticated Insecure Direct Object Reference to Arbitrary Order Deletion and Modification via Apple Pay AJAX Actions High 7.5 3.1.1
2026-10-21 WPSEC-2026-1339 PayPlug for WooCommerce (Official) <= 3.1.0 - Unauthenticated Insecure Direct Object Reference to Order Status Modification via check_payment and create_payment_intent Medium 6.5 3.1.1

License: CC BY 4.0