Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

6 records

Vendor: peachpay Clear all filters
TI-2026-08448 CVE-2026-9618 · GHSA-2wqg-w33r-qx37

PeachPay <= 1.120.46 - Cross-Site Request Forgery to Stripe Unlink

Priority LOW 19

The PeachPay — Payments & Express Checkout for WooCommerce (supports Stripe, PayPal, Square, Authorize.net, NMI) plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.12…

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00138 Published 2026-05-28 No fix listed CWE-352
TI-2025-13662 CVE-2025-14978 · GHSA-mcww-77h6-2wxm

Missing authorization in PeachPay — Payments & Express Checkout for WooCommerce

Priority LOW 30

The PeachPay — Payments & Express Checkout for WooCommerce (supports Stripe, PayPal, Square, Authorize.net) plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability checks on th…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00255 Published 2026-01-20 No fix listed CWE-862
TI-2025-08671 CVE-2025-9463 · GHSA-7wq8-26qh-7h39

SQL injection in PeachPay — Payments & Express Checkout for WooCommerce

Priority LOW 29

The Payments Plugin and Checkout Plugin for WooCommerce: Stripe, PayPal, Square, Authorize.net plugin for WordPress is vulnerable to time-based SQL Injection via the ‘order_by’ parameter in all versions up to, and includ…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00315 Published 2025-09-10 No fix listed CWE-89
TI-2025-36302 CVE-2025-58634 · GHSA-9xjg-hc8v-33c4

WordPress PeachPay Payments Plugin <= 1.117.4 - Broken Access Control Vulnerability

Priority LOW 29

Missing Authorization vulnerability in peachpay PeachPay Payments peachpay-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects PeachPay Payments: from n/a through <=…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00224 Published 2025-09-03 No fix listed CWE-862
TI-2024-10527 CVE-2024-11362 · GHSA-v3qw-4c5f-fm46

Cross-site scripting in PeachPay — Payments & Express Checkout for WooCommerce

Priority LOW 28

The Payments Plugin and Checkout Plugin for WooCommerce: Stripe, PayPal, Square, Authorize.net plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate esca…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00476 Published 2024-11-23 No fix listed CWE-79
TI-2023-04812 CVE-2023-5234 · GHSA-mqh5-5vgm-447m

Related Products for WooCommerce <= 3.3.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

Priority LOW 29

The Related Products for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'woo-related' shortcode in versions up to, and including, 3.3.15 due to insufficient input sanitization and outpu…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00629 Published 2023-11-22 No fix listed CWE-79