Razorpay Razorpay For Woocommerce
3 CVEs affecting Razorpay Razorpay For Woocommerce. Latest disclosed: 2026-08-18. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-74009 | Medium | 5.3 | 2026-08-18 | Unauthenticated Insecure Direct Object References (IDOR) in Razorpay for WooCommerce <= 4.8.7 versions. |
CVE-2026-39656 | Medium | 5.3 | 2026-04-08 | Missing Authorization vulnerability in Razorpay Razorpay for WooCommerce woo-razorpay allows Exploiting Incorrectly Configured Access Control Security Levels.T… |
CVE-2025-14294 | Medium | 5.3 | 2026-02-19 | The Razorpay for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the getCouponList() f… |