Advisories · Technology

Payment Plugins for PayPal WooCommerce.

Every CVE that names Payment Plugins for PayPal WooCommerce among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-80342 CVE record

CVSS 6.5 Medium

Payment Plugins for PayPal WooCommerce < 2.0.27 - Unauthenticated Payment Hijacking via Unvalidated PayPal Order ID
- Payment Plugins for PayPal WooCommerce
- Broken access control
Not analysed yet 23 Sept 2026
CVE-2026-80341 CVE record

CVSS 5.9 Medium

Payment Plugins for PayPal WooCommerce < 2.0.26 - Subscriber+ Stored Payment Method Assignment via IDOR
- Payment Plugins for PayPal WooCommerce
- Broken access control
Not analysed yet 9 Sept 2026
CVE-2026-80340 CVE record

CVSS 5.3 Medium

Payment Plugins for PayPal WooCommerce < 2.0.26 - Unauthenticated Customer PII Disclosure via order-pay
- Payment Plugins for PayPal WooCommerce
- Information disclosure
Not analysed yet 9 Sept 2026
CVE-2026-13399 CVE record

CVSS 7.5 High

Payment Plugins for PayPal WooCommerce < 2.0.20 - Unauthenticated Payment Bypass via Reuse of a Completed PayPal Order
- Payment Plugins for PayPal WooCommerce
- Broken access control
Not analysed yet 6 Aug 2026
CVE-2026-39643 CVE record

CVSS 5.3 Medium

WordPress Payment Plugins for PayPal WooCommerce plugin <= 2.0.13 - Broken Access Control vulnerability
- Payment Plugins for PayPal WooCommerce
- Broken access control
Not analysed yet 8 Apr 2026