Conditional Payments for WooCommerce

Conditional Payments for WooCommerce has 2 disclosed vulnerabilities in the WordSec catalog, reported between 2023 and 2025; all 2 are fixed as of September 2026. Their average CVSS score is 4.8, and the most serious one scores 5.4 out of 10.

The most common weakness is Cross-Site Request Forgery (CSRF), behind 2 of the records (100%).

Every one of the 2 issues recorded for Conditional Payments for WooCommerce has a vendor fix available, so running the current release closes all known holes.

2 independent researchers contributed these findings, one record each. Conditional Payments for WooCommerce is installed on roughly 10,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.4.

Strategic Overview

Avg CVSSMedium
4.8/ 10
Patch Coverage100%
Open

0

Fixed

2

Get automatic notifications for all Conditional Payments for WooCommerce vulnerabilities before they are exploited.

Highest severity on recordCVSS 5.4CVE-2022-46805

Conditional Payments for WooCommerce <= 2.3.1 - Cross-Site Request Forgery

Read the full analysis

Vulnerability Records

2 records
Conditional Payments for WooCommerce banner
Latestv3.5.1

Conditional Payments for WooCommerce

WP Trio

Author

WP Trio

4.6(28)
92/100
Last Updated
2026-08-06 (1mo ago)
Active Installs
10,000+
Downloads
245,863
Requires WP
4.5+
Requires PHP
7.0+
Tested up to
WP 7.0.4
Created
2018-09-08 (8y ago)

Conditional Payments for WooCommerce allows you to restrict payment methods based on conditions. For example, you can enable Cash on Delivery only when the shipping method is Local pickup. The plugin works with your existing payment methods. You can restrict PayPal, Stripe, Cash on Delivery and any other payment method. Example 1 You have two payment methods, PayPal and Cash on Delivery. PayPal can be used for all orders but COD only when the customer pickups the order. With Conditional Payments you can add shipping method condition to Cash on Delivery which checks that the shipping method is Local pickup. Example 2 You want to provide invoice payment method only for business customers. You can add billing company condition to Invoice to prevent private customers from ordering with Invoice. Features Hide payment methods based on conditions Show payment methods based on conditions Works with built-in and 3rd party payment methods Debug mode for easy troubleshooting Available Conditions Products Order Subtotal Shipping method Billing address (all fields) Shipping address (all fields) Pro Features All free features Add payment method fees conditionally More conditions Coupon Currency Stock status (in stock, backorders) Shipping class Product category Logged in / out User role Groups Language (Polylang or WPML) And more Upgrade to Pro Support Policy If you need any help with the plugin, please create a new post on the WordPress plugin support forum. It will be checked regularly but please note that response cannot be guaranteed to all issues. Priority email support is available for the Pro version. Other Useful Plugins Make sure to check out other useful plugins from the author. Conditional Shipping for WooCommerce Stock Sync for WooCommerce Product Sync for WooCommerce

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C