Razorpay
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Razorpay for WooCommerce | 3 | – | Aug 18, 2026 |
| Razorpay Payment Button Elementor Plugin | 2 | – | Oct 29, 2026 |
| IFSC | 1 | – | Oct 13, 2026 |
| Razorpay Payment Button | 1 | – | Sep 23, 2026 |
| Razorpay Payment Button Plugin | 1 | – | Nov 13, 2024 |
| Razorpay Subscription Button Elementor Plugin | 1 | – | Mar 5, 2025 |
Exploited and recent CVEs
- CVE-2026-54866 WordPress Razorpay Payment Button Elementor Plugin plugin <= 1.2.8 - Cross Site Scripting (XSS) vulnerability 0.2%
- CVE-2026-110222 Razorpay IFSC Ruby gem through 2.0.62 SSRF via IFSC lookup 0.4%
- CVE-2026-94179 WordPress Razorpay Payment Button plugin <= 2.4.9 - Cross Site Scripting (XSS) vulnerability 0.3%
- CVE-2026-74009 WordPress Razorpay for WooCommerce plugin <= 4.8.7 - Insecure Direct Object References (IDOR) vulnerability 0.3%
- CVE-2026-39656 WordPress Razorpay for WooCommerce plugin <= 4.8.2 - Broken Access Control vulnerability 0.2%
- CVE-2025-14294 Razorpay for WooCommerce <= 4.7.8 - Missing Authentication to Unauthenticated Order Modification 0.4%
- CVE-2024-13827 Razorpay Subscription Button Elementor Plugin <= 1.0.3 - Reflected Cross-Site Scripting via add_query_arg and remove_query_arg Functions 0.3%
- CVE-2024-10850 Razorpay Payment Button for Elementor <= 1.2.5 - Reflected Cross-Site Scripting 0.5%
- CVE-2024-10851 Razorpay Payment Button <= 2.4.6 - Reflected Cross-Site Scripting 0.5%