WordPress security by component
WooCommerce PayPal Payments
Plugin description
WooCommerce PayPal Payments is a WordPress component with 2 published CVE records in this archive. The latest tracked vulnerability was published May 23, 2026; the highest CVE/CNA score is 8.2.
Plugin slug:
woocommerce-paypal-paymentsLatest vulnerability
CVE-2026-9284: WooCommerce PayPal Payments: Sensitive information exposure
WooCommerce PayPal Payments is affected by sensitive information exposure. The vulnerable path is reachable without authentication. Successful exploitation can disclose data that should not be available to the caller. The published affected range is <= 4.0.1.
| Safe version |
|
||
|---|---|---|---|
| May 23, 2026 |
CVE-2026-9284
WooCommerce PayPal Payments: Sensitive information exposure
WooCommerce PayPal Payments is affected by sensitive information exposure. The vulnerable path is reachable without authentication. Successful exploitation can disclose data that should not be available to the caller. The published affected range is <= 4.0.1.
|
> 4.0.1 |
CVE8.2
NVDPending
|
| Jun 22, 2023 |
CVE-2023-35917
Woocommerce Paypal Payments: Cross-site request forgery
Woocommerce Paypal Payments is affected by cross-site request forgery. Exposure depends on how the affected operation is made reachable by the site. Exploitation relies on a signed-in privileged user submitting an attacker-controlled request.
|
See mitigation notes |
CVE4.3
NVD8.8
|