Advisories · Technology

Paymob for WooCommerce.

Every CVE that names Paymob for WooCommerce among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-87978 CVE record

CVSS 5.3 Medium

Paymob for WooCommerce < 4.1.14 - Unauthenticated Payment Bypass via Unverified Subscription Transaction Callback
- Paymob for WooCommerce
- CWE-345
Not analysed yet 23 Sept 2026
CVE-2026-87981 CVE record

CVSS 4.7 Medium

Paymob for WooCommerce < 4.1.14 - Contributor+ Payment Gateway Configuration Deletion and Modification via Multiple AJAX Actions
- Paymob for WooCommerce
- Broken access control
Not analysed yet 23 Sept 2026
CVE-2026-87979 CVE record

CVSS 5.3 Medium

Paymob for WooCommerce < 4.1.14 - Unauthenticated Saved Card Token Write to Any User via Webhook
- Paymob for WooCommerce
- Broken access control
Not analysed yet 23 Sept 2026
CVE-2026-66611 CVE record

CVSS 7.1 High

WordPress Paymob for WooCommerce plugin <= 4.1.10 - Cross Site Scripting (XSS) vulnerability
- Paymob for WooCommerce
- Cross-site scripting (XSS)
Not analysed yet 20 Aug 2026
CVE-2026-15205 CVE record

CVSS 8.6 High

Paymob for WooCommerce < 4.1.9 - Unauthenticated SQL Injection via Paymob Callback Pixel Lookup
- Paymob for WooCommerce
- SQL injection
Not analysed yet 14 Aug 2026
CVE-2026-56025 CVE record

CVSS 7.5 High

WordPress Paymob for WooCommerce plugin <= 4.1.2 - Broken Access Control vulnerability
- Paymob for WooCommerce
- Broken access control
Not analysed yet 26 Jun 2026