Advisories · Technology

PayPlug for WooCommerce (Official).

Every CVE that names PayPlug for WooCommerce (Official) among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-113813 CVE record

CVSS 6.5 Medium

PayPlug for WooCommerce 2.8.0 - 3.1.0 - Unauthenticated Arbitrary Order Deletion, Modification and Disclosure
- PayPlug for WooCommerce (Official)
- Broken access control
Not analysed yet 28 Oct 2026
CVE-2026-110292 CVE record

CVSS 6.5 Medium

PayPlug for WooCommerce 2.9.0 - 3.1.0 - Unauthenticated Order Key Disclosure and Order Cancellation via payplug_create_intent
- PayPlug for WooCommerce (Official)
- Information disclosure
Not analysed yet 28 Oct 2026
CVE-2026-42637 CVE record

CVSS 6.5 Medium

WordPress PayPlug for WooCommerce (Official) plugin <= 3.1.0 - Settings Change vulnerability
- PayPlug for WooCommerce (Official)
- Broken access control
Not analysed yet 6 Oct 2026
CVE-2026-39751 CVE record

CVSS 7.5 High

WordPress PayPlug for WooCommerce (Official) plugin <= 3.1.0 - Broken Access Control vulnerability
- PayPlug for WooCommerce (Official)
- Broken access control
Not analysed yet 6 Oct 2026