Vulnerabilities / YITH PayPal Express Checkout for WooCommerce
YITH PayPal Express Checkout for WooCommerce vulnerabilities
Advisories WPSec published for YITH PayPal Express Checkout for WooCommerce. Other sources may list more. Its attack surface: YITH PayPal Express Checkout for WooCommerce on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-10-21 | WPSEC-2026-1314 | YITH PayPal Express Checkout for WooCommerce <= 1.62.0 - Unauthenticated Insecure Direct Object Reference via PayPal Express Checkout Return 'order_id' and 'order_key' Parameters | Medium 5.3 | 1.62.1 |
License: CC BY 4.0