Known vulnerabilities in WooCommerce PayPal Payments
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2025-14073 | The WooCommerce PayPal Payments plugin for WordPress is vulnerable to Sensitive Information Disclosure due to an… | 5.3 Medium | Aug 1, 2026 |
| CVE-2026-9284 | The WooCommerce PayPal Payments plugin for WordPress is vulnerable to unauthorized order manipulation and information… | 8.2 High | May 23, 2026 |
| CVE-2023-35917 | Cross-Site Request Forgery (CSRF) vulnerability in WooCommerce PayPal Payments plugin <= 2.0.4 versions | 4.3 Medium | Jun 22, 2023 |
Other WooCommerce products
AutomateWoo 5
woocommerce_customers_manager 5
WooCommerce Stripe Payment Gateway 5
woocommerce 4
Shipping Multiple Addresses 3
Product Vendors 3
WooCommerce Square 2
WooCommerce Box Office 2
WooCommerce Pre-Orders 2
WooCommerce Bookings 2
WooCommerce Follow-Up Emails (AutomateWoo) 2
Product Add-Ons 2