Advisories · Technology

Global Payments GlobalPayments WooCommerce.

Every CVE that names Global Payments GlobalPayments WooCommerce among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-118085 CVE record

CVSS 7.1 High

WordPress GlobalPayments WooCommerce plugin <= 1.23.3 - Cross Site Scripting (XSS) vulnerability
- Global Payments GlobalPayments WooCommerce
- Cross-site scripting (XSS)
Not analysed yet 29 Oct 2026
CVE-2026-39645 CVE record

CVSS 5.4 Medium

WordPress GlobalPayments WooCommerce plugin <= 1.18.0 - Server Side Request Forgery (SSRF) vulnerability
- Global Payments GlobalPayments WooCommerce
- Server-side request forgery (SSRF)
Not analysed yet 8 Apr 2026
CVE-2025-22767 CVE record

CVSS 7.1 High

WordPress GlobalPayments WooCommerce Plugin <= 1.13.2 - Reflected Cross Site Scripting (XSS) vulnerability
- Global Payments GlobalPayments WooCommerce
- Cross-site scripting (XSS)
Not analysed yet 28 Mar 2025