Vulnerabilities / WooCommerce Payments
WooCommerce Payments vulnerabilities
Advisories WPSec published for WooPayments: Integrated WooCommerce Payments. Other sources may list more. Its attack surface: WooCommerce Payments on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-10-11 | WPSEC-2026-0766 | WooCommerce Payments <= 11.1.0 - Unauthenticated Insecure Direct Object Reference to Order Update via 'order_id' Parameter | Medium 5.3 | 11.2.0 |
License: CC BY 4.0