Coinbase Business Gateway for WooCommerce

Coinbase Business Gateway for WooCommerce has 3 disclosed vulnerabilities in the WordSec catalog, reported between 2022 and 2026; 2 are fixed and 1 remains unpatched as of September 2026. Their average CVSS score is 5.9, and the most serious one scores 6.3 out of 10.

The most common weakness is Missing Authorization, behind 2 of the records (67%). Other recurring categories include Cross-Site Scripting.

2 of the records (67%) have a vendor fix, while 1 remain unpatched. The oldest unresolved one dates back to 2026.

2 independent researchers contributed these findings, one record each. Coinbase Business Gateway for WooCommerce is installed on roughly 700 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.4.

Strategic Overview

Avg CVSSMedium

5.9/ 10

Patch Coverage67%

Open

Fixed

Get automatic notifications for all Coinbase Business Gateway for WooCommerce vulnerabilities before they are exploited.

Most severe open issueCVSS 5.3CVE-2026-25396

Coinbase Commerce – Crypto Gateway for WooCommerce <= 1.6.6 - Missing Authorization

Read the full analysis

Vulnerability Records

3 records


2026-03-23 00:00	Coinbase Commerce – Crypto Gateway for WooCommerce <= 1.6.6 - Missing Authorization Coinbase Business Gateway… <= 1.6.6	`CVE-2026-25396`	5.3 Medium	Legion Hunter	No
2023-07-18 00:00	Freemius SDK <= 2.5.9 - Reflected Cross-Site Scripting via fs_request_get Coinbase Business Gateway… <= 1.4.14	`CVE-2023-33999`	6.1 Medium	Rafie Muhammad	Yes
2022-03-04 00:00	Freemius SDK <= 2.4.2 - Missing Authorization Checks Coinbase Business Gateway… < 1.4.1	`CVE-2022-4974`	6.3 Medium	Anonymous	Yes

Showing 1–3 of 3 reports

Latestv1.6.8

Coinbase Business Gateway for WooCommerce

Author

CoderPress

4.2(26)

84/100

Last Updated

2026-06-02 (3mo ago)

Active Installs

700+

Downloads

57,687

Requires WP

4.9+

Requires PHP

8.0+

Tested up to

WP 7.0.4

Created

2021-03-02 (6y ago)

⚠️ Coinbase Commerce API has been deprecated and we’ve migrated to Coinbase Business to use Coinbase Business Get Coinbase Business Now Get Pro👑 | Pro Live Demo | Documentation 1,000+ sites are using Coinbase gateways to accept payments with confidence. Update to our 1.7.0 version perfectly mapped to the new Coinbase Business standard. How to setup Coinbase Business on WooCommerce webstore: Download and Activate the Coinbase Plugin For WooCommerce. Enable from WooCommerce > Settings > Payments > Coinbase Business Gateway. Create and enter your CDP API Key Name and CDP Private Key from coinbase.com/business. Set up a Webhook endpoint using the URL provided in settings, and paste the Webhook Secret. Ensure your WooCommerce Store Currency is set to USD. Currencies Support USDC on Base Coinbase Business for WooCommerce Pro – Premium Includes Show USDC Icons and Approximate Pricing on Product Page Show USDC Icons and Approximate Pricing on Shop Page Allow specific products to be purchased with Coinbase Set minimum checkout amount to purchase with Coinbase Specify Order status to set when payment is done Better User Experience Priority Support Easy Setup Better Redirections Become Pro User👑

View on WordPress.org