paymentplugins
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Payment Plugins for Stripe WooCommerce | 2 | – | Oct 10, 2026 |
| Payment Plugins Braintree For WooCommerce | 1 | – | Nov 12, 2025 |
Exploited and recent CVEs
- CVE-2026-89100 Payment Plugins for Stripe WooCommerce <= 4.0.17 - Reflected DOM-Based Cross-Site Scripting via '#response' URL Fragment 0.2%
- CVE-2026-12654 Payment Plugins for Stripe WooCommerce <= 4.0.7 - Missing Authorization to Unauthenticated Arbitrary Order Status Modification via Empty Webhook Secret 0.6%
- CVE-2025-12903 Payment Plugins Braintree For WooCommerce <= 3.2.78 - Missing Authorization to Payment Token Exposure and Transaction Fraud 0.5%