Razorpay vulnerabilities
9 published CVEs name Razorpay among the affected products.
- 9Published CVEs9 of them scored
- 6Last 12 monthspublished in the last year
- 0Critical2 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-54866
WordPress Razorpay Payment Button Elementor Plugin plugin <= 1.2.8 - Cross Site Scripting (XSS) vulnerability
Razorpay · Razorpay Payment Button Elementor Plugin
High7.1 - CVE-2026-110222
Razorpay IFSC Ruby gem through 2.0.62 SSRF via IFSC lookup
Razorpay · IFSC
Medium6.9 - CVE-2026-94179
WordPress Razorpay Payment Button plugin <= 2.4.9 - Cross Site Scripting (XSS) vulnerability
Razorpay · Razorpay Payment Button
High7.1 - CVE-2026-74009
WordPress Razorpay for WooCommerce plugin <= 4.8.7 - Insecure Direct Object References (IDOR) vulnerability
Razorpay · Razorpay for WooCommerce
Medium5.3 - CVE-2026-39656
WordPress Razorpay for WooCommerce plugin <= 4.8.2 - Broken Access Control vulnerability
Razorpay · Razorpay for WooCommerce
Medium5.3 - CVE-2025-14294
Razorpay for WooCommerce <= 4.7.8 - Missing Authentication to Unauthenticated Order Modification
razorpay · Razorpay for WooCommerce
Medium5.3 - CVE-2024-13827
Razorpay Subscription Button Elementor Plugin <= 1.0.3 - Reflected Cross-Site Scripting via add_query_arg and remove_query_arg Functions
razorpay · Razorpay Subscription Button Elementor Plugin
Medium6.1 - CVE-2024-10850
Razorpay Payment Button for Elementor <= 1.2.5 - Reflected Cross-Site Scripting
razorpay · Razorpay Payment Button Elementor Plugin
Medium6.1 - CVE-2024-10851
Razorpay Payment Button <= 2.4.6 - Reflected Cross-Site Scripting
razorpay · Razorpay Payment Button Plugin
Medium6.1