Vulnerabilities / Razorpay for WooCommerce
Razorpay for WooCommerce vulnerabilities
Advisories WPSec published for Razorpay for WooCommerce. Other sources may list more. Its attack surface: Razorpay for WooCommerce on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-11-05 | WPSEC-2026-2604 | Razorpay for WooCommerce <= 4.8.8 - Unauthenticated Authentication Bypass via 'email' Parameter in Coupon Apply Endpoint | Low 3.7 | 4.8.9 |
| 2026-11-05 | WPSEC-2026-2603 | Razorpay for WooCommerce <= 4.8.8 - Unauthenticated Insecure Direct Object Reference via Magic Checkout Coupon Apply Endpoint | Medium 5.3 | 4.8.9 |
| 2026-11-05 | WPSEC-2026-2602 | Razorpay for WooCommerce <= 4.8.8 - Unauthenticated SQL Injection via Webhook Event Processing | Medium 5.9 | 4.8.9 |
License: CC BY 4.0