Advanced Partial Payment or Deposit for WooCommerce
Advanced Partial Payment or Deposit for WooCommerce has 2 disclosed vulnerabilities in the WordSec catalog, all reported in 2026; all 2 are fixed as of October 2026. Their average CVSS score is 4.8, and the most serious one scores 5.3 out of 10. 2026 was the busiest year with 2 disclosures.
The most common weakness is Missing Authorization, behind 2 of the records (100%).
Every one of the 2 issues recorded for Advanced Partial Payment or Deposit for WooCommerce has a vendor fix available, so running the current release closes all known holes.
2 independent researchers contributed these findings, one record each. Advanced Partial Payment or Deposit for WooCommerce is installed on roughly 100 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.4.
CVE-2026-27378Advanced Partial Payment or Deposit for WooCommerce <= 3.1.0 - Missing Authorization
Read the full analysisVulnerability Records

Advanced Partial Payment or Deposit for WooCommerce
Author
magepeopleteam
Advanced Partial Payment or Deposit for WooCommerce lets you collect deposits and partial payments on your WooCommerce store. Perfect for high-value items, services, bookings, and custom orders. Free Features Fixed & Percentage Deposits — Collect a flat amount or percentage of the product price Per-Product Settings — Override global settings on individual products Category-Wise Rules — Set deposit rules per product category Cart & Checkout Integration — Beautiful deposit breakdown display Custom Order Status — “Partially Paid” status for deposit orders Balance Tracking — Track remaining balance on each order Pay Balance — Customers can pay balance from My Account Email Notifications — Deposit received, balance due, payment complete Admin Management — Deposit metabox on orders, manual payment recording Deposits on Admin Orders — Add a fixed or percentage deposit to orders created or edited in wp-admin, including orders added by booking plugins Default Payment Option — Choose whether deposit or full payment is preselected for customers Price Calculator Support — Product-page deposit and balance figures update when a price calculator or configurator changes the price Clean Uninstall (opt-in) — Optionally remove all settings and deposit data when the plugin is deleted Professional Dashboard — Tabbed settings page with sidebar navigation Pro Features Payment Plans / Installments Flexible Payments — customers pay off the balance in any amounts they choose Checkout Mode — ask for the deposit choice on the cart or checkout page Per-variation deposits, balance due dates, and deposit/balance allocation of shipping, tax and discounts Automatic balance charging on the due date using the customer’s saved payment method Minimum & Maximum Deposit Amounts Payment Gateway Restrictions Auto Payment Reminders Forced Deposit Mode Reports & Analytics Tax & Fee Handling Bulk Product Settings User Role-Based Deposits Conditional Deposit Rules Order Workflow — choose the status an order moves to once fully paid Catalog Deposit Buttons — “Pay deposit” buttons on shop and archive pages Admin Email Notifications — deposit received, fully paid, overdue and auto-charge alerts External Services Appneck This Plugin uses Appneck SDK to collect some telemetry data upon the user’s confirmation to troubleshoot problems faster & make product improvements. Appneck SDK does not gather any data by default. The SDK only starts gathering basic telemetry data when a user allows it via the admin notice. We collect the data to ensure a great user experience for all our users. Integrating Appneck SDK DOES NOT IMMEDIATELY start gathering data, without confirmation from users in any case. Learn more about how Appneck collects and uses this data.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C