Afterpay Gateway for WooCommerce

Afterpay Gateway for WooCommerce has 2 disclosed vulnerabilities in the WordSec catalog, reported between 2021 and 2022; all 2 are fixed as of September 2026. Their average CVSS score is 6.1, and the most serious one scores 6.1 out of 10.

The most common weakness is Cross-Site Scripting, behind 2 of the records (100%).

Every one of the 2 issues recorded for Afterpay Gateway for WooCommerce has a vendor fix available, so running the current release closes all known holes.

2 independent researchers contributed these findings, one record each. Afterpay Gateway for WooCommerce is installed on roughly 10,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.7.7.

Strategic Overview

Avg CVSSMedium

6.1/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Afterpay Gateway for WooCommerce vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.1CVE-2022-29416

Afterpay Gateway for WooCommerce <= 3.5.0 - Reflected Cross-Site Scripting

Read the full analysis

Vulnerability Records

2 records


2022-12-09 00:00	Afterpay Gateway for WooCommerce <= 3.5.0 - Reflected Cross-Site Scripting Afterpay Gateway for WooCommerce <= 3.5.0	`CVE-2022-29416`	6.1 Medium	Nguyen Anh Tien	Yes
2021-08-16 00:00	Afterpay Gateway for WooCommerce <= 3.2.0 - Reflected Cross-Site Scripting Afterpay Gateway for WooCommerce <= 3.2.0	`N/A`	6.1 Medium	WPScanTeam	Yes

Showing 1–2 of 2 reports

Latestv3.8.8

Afterpay Gateway for WooCommerce

Author

Afterpay

3.6(45)

72/100

Last Updated

2025-03-17 (2y ago)

Active Installs

10,000+

Downloads

491,304

Requires WP

6.0.3+

Requires PHP

7.4+

Tested up to

WP 6.7.7

Created

2018-08-29 (8y ago)

Requires Plugins

woocommerce

Give your customers the option to buy now and pay later with Afterpay. The “Afterpay Gateway for WooCommerce” plugin provides the option to choose Afterpay as the payment method at the checkout. It also provides the functionality to display the Afterpay logo and instalment calculations below product prices on category pages, individual product pages, and on the cart page. When checking out with Afterpay, WooCommerce will create a pending order. The user will be redirected to Afterpay to confirm payment for their order. Automatic refunds are also supported.

View on WordPress.org