Advisories · Technology
Razorpay for WooCommerce.
Every CVE that names Razorpay for WooCommerce among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 4.1 Medium
Razorpay for WooCommerce < 4.8.9 - Admin+ SQLi via Webhook
- Razorpay for WooCommerce
- SQL injection
- CVSS 3.7 Low
Razorpay for WooCommerce < 4.8.9 - Unauthenticated User Context Switch via 1cc Coupon Route
- Razorpay for WooCommerce
- Broken access control
- CVSS 5.3 Medium
Razorpay for WooCommerce < 4.8.9 - Unauthenticated Order Data Disclosure via 1CC Coupon Apply
- Razorpay for WooCommerce
- Information disclosure
- CVSS 5.3 Medium
Razorpay for WooCommerce < 4.8.8 - Unauthenticated Order Shipping Modification via IDOR
- Razorpay for WooCommerce
- Broken access control
- CVSS 5.3 Medium
WordPress Razorpay for WooCommerce plugin <= 4.8.7 - Insecure Direct Object References (IDOR) vulnerability
- Razorpay for WooCommerce
- Broken access control
- CVSS 5.3 Medium
WordPress Razorpay for WooCommerce plugin <= 4.8.2 - Broken Access Control vulnerability
- Razorpay for WooCommerce
- Broken access control
- CVSS 5.3 Medium
Razorpay for WooCommerce <= 4.7.8 - Missing Authentication to Unauthenticated Order Modification
- Razorpay for WooCommerce
- Authentication bypass