peachpay vulnerabilities
6 published CVEs name peachpay among the affected products.
- 6Published CVEs6 of them scored
- 2Last 12 monthspublished in the last year
- 0Critical0 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-9618
PeachPay <= 1.120.46 - Cross-Site Request Forgery to Stripe Unlink
peachpay · PeachPay — Payments & Express Checkout for WooCommerce (supports Stripe, PayPal, Square, Authorize.net, NMI)
Medium4.3 - CVE-2025-14978
PeachPay — Payments & Express Checkout for WooCommerce (supports Stripe, PayPal, Square, Authorize.net) <= 1.119.8 - Missing Authorization to Unauthenticated Order Status Modification
peachpay · PeachPay — Payments & Express Checkout for WooCommerce (supports Stripe, PayPal, Square, Authorize.net, NMI)
Medium5.3 - CVE-2025-9463
Payments Plugin and Checkout Plugin for WooCommerce: Stripe, PayPal, Square, Authorize.net <= 1.117.5 - Authenticated (Contributor+) SQL Injection via order_by Parameter
peachpay · PeachPay — Payments & Express Checkout for WooCommerce (supports Stripe, PayPal, Square, Authorize.net, NMI)
Medium6.5 - CVE-2025-58634
WordPress PeachPay Payments Plugin <= 1.117.4 - Broken Access Control Vulnerability
peachpay · PeachPay Payments
Medium5.3 - CVE-2024-11362
Payments Plugin and Checkout Plugin for WooCommerce: Stripe, PayPal, Square, Authorize.net <= 1.112.0 - Reflected Cross-Site Scripting
peachpay · PeachPay — Payments & Express Checkout for WooCommerce (supports Stripe, PayPal, Square, Authorize.net, NMI)
Medium6.1 - CVE-2023-5234
Related Products for WooCommerce <= 3.3.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
peachpay · Related Products for WooCommerce
Medium6.4