Razorpay For Woocommerce
Approved changes feed: RSS · Atom
cpe:2.3:a:razorpay:razorpay_for_woocommerce:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Razorpay (0555311e-5bbc-5814-8343-63be7d36fb05) |
|---|---|
| Product | Razorpay For Woocommerce (ffa213d6-8a12-56ff-afc2-794359759eb6) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-39656 |
vulnerable | 2026-06-08 08:01:16.770334 |
WordPress Razorpay for WooCommerce plugin <= 4.8.2 - Broken Access Control vulnerability
MEDIUM (5.3)
Missing Authorization vulnerability in Razorpay Razorpay for WooCommerce woo-razorpay allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Razorpay for WooCommerce: from n/a through <= 4.8.2.
Published: 2026-04-08T08:30:36.077Z
Updated: 2026-04-29T09:52:03.954Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-14294 |
vulnerable | 2026-06-08 07:06:34.201835 |
Razorpay for WooCommerce <= 4.7.8 - Missing Authentication to Unauthenticated Order Modification
MEDIUM (5.3)
The Razorpay for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the getCouponList() function in all versions up to, and including, 4.7.8. This is due to the checkAuthCredentials() permission callback always returning true, providing no actual authentication. This makes it possible for unauthenticated attackers to modify the billing and shipping contact information (email and phone) of any WooCommerce order by knowing or guessing the order ID.
Published: 2026-02-19T04:36:07.208Z
Updated: 2026-04-08T16:37:06.887Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.