Ppeachpay

Products

Exploited and recent CVEs

• CVE-2026-9618 Medium 4.3 PeachPay <= 1.120.46 - Cross-Site Request Forgery to Stripe Unlink 0.1%
• CVE-2025-14978 Medium 5.3 PeachPay — Payments & Express Checkout for WooCommerce (supports Stripe, PayPal, Square, Authorize.net) <= 1.119.8 - Missing Authorization to Unauthenticated Order Status Modification 0.3%
• CVE-2025-9463 Medium 6.5 Payments Plugin and Checkout Plugin for WooCommerce: Stripe, PayPal, Square, Authorize.net <= 1.117.5 - Authenticated (Contributor+) SQL Injection via order_by Parameter 0.3%
• CVE-2025-58634 Medium 5.3 WordPress PeachPay Payments Plugin <= 1.117.4 - Broken Access Control Vulnerability 0.2%
• CVE-2024-11362 Medium 6.1 Payments Plugin and Checkout Plugin for WooCommerce: Stripe, PayPal, Square, Authorize.net <= 1.112.0 - Reflected Cross-Site Scripting 0.5%
• CVE-2023-5234 Medium 6.4 Related Products for WooCommerce <= 3.3.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode 0.6%