Known Vulnerabilities for Paypal Payments by Woocommerce
Listed below are 1 of the newest known vulnerabilities associated with "Paypal Payments" by "Woocommerce".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-110017 json | The Quick PayPal Payments: Payment Button & Form plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'f... | Not Provided | 2026-10-16 | 2026-10-16 |
| CVE-2026-108492 json | Missing Authorization vulnerability in Fullworks Plugins Quick Paypal Payments quick-paypal-payments allows Exploiting Incorr... | Not Provided | 2026-10-13 | 2026-10-13 |
| CVE-2026-107636 json | pH7Builder (pH7 Social Dating CMS) before 18.5.1 contains a payment validation vulnerability that allows registered low-privi... | Not Provided | 2026-10-08 | 2026-10-08 |
| CVE-2026-105990 json | The Accept PayPal Payments using Contact Form 7 WordPress plugin before 4.0.7 does not perform any authorization checks befor... | Not Provided | 2026-10-10 | 2026-10-10 |
| CVE-2026-105989 json | The Accept PayPal Payments using Contact Form 7 WordPress plugin before 4.0.7 does not perform any authorization or request-v... | Not Provided | 2026-10-10 | 2026-10-10 |
| CVE-2026-103376 json | The PeachPay — Payments & Express Checkout for WooCommerce (supports Stripe, PayPal, Square, Authorize.net, NMI) WordPress ... | Not Provided | 2026-10-17 | 2026-10-18 |
| CVE-2026-101166 json | The Mollie Payments for WooCommerce WordPress plugin before 8.2.0 does not verify a product's publication status before creat... | Not Provided | 2026-11-04 | 2026-11-04 |
| CVE-2026-97661 json | The Business Essentials for Contact Form 7 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'gateway' Fo... | Not Provided | 2026-10-01 | 2026-10-01 |
| CVE-2026-96818 json | Unauthenticated Broken Access Control in WP Express Checkout (Accept PayPal Payments) <= 2.4.9 versions. | Not Provided | 2026-09-30 | 2026-09-30 |
| CVE-2026-14335 json | The Easy Digital Downloads – eCommerce Payments and Subscriptions made easy plugin for WordPress is vulnerable to Stored Cr... | Not Provided | 2026-10-10 | 2026-10-11 |