en
Severity across 3 analyzed records
A short verification protects source data and prevents automated AI requests.
The GCVE catalog currently lists 3 vulnerability records affecting Payment Plugins for PayPal WooCommerce.
Among the 3 records analyzed by CyStack, 1 are High or Critical and 0 appear in the CISA KEV catalog.
Compare the version you run with each vulnerability and the provider guidance below. The data only includes records analyzed so far.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
Explore CyStack VulnScan
| CVE | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2026-80341Payment Plugins for PayPal WooCommerce < 2.0.26 - Subscriber+ Stored Payment Method Assignment via IDOR | Exploitation statusPublic exploit | FixYes | Published09/09/2026 | SeverityMedium |
CVE-2026-80340Payment Plugins for PayPal WooCommerce < 2.0.26 - Unauthenticated Customer PII Disclosure via order-pay | Exploitation statusPublic exploit | FixYes | Published09/09/2026 | SeverityMedium |
CVE-2026-13399Payment Plugins for PayPal WooCommerce < 2.0.20 - Unauthenticated Payment Bypass via Reuse of a Completed PayPal Order | Exploitation statusPublic exploit | FixYes | Published08/06/2026 | SeverityHigh |
