ePayco plugin for WooCommerce
ePayco plugin for WooCommerce has one disclosed vulnerability in the WordSec catalog, all reported in 2026; it is fixed as of September 2026. Their average CVSS score is 7.5, and the most serious one scores 7.5 out of 10. Severity breakdown: 0 critical and 1 high.
The most common weakness is SQL Injection, behind 1 of the records (100%).
The one issue recorded for ePayco plugin for WooCommerce has a vendor fix available, so running the current release closes it.
All of these findings were reported by Lee chul woong. ePayco plugin for WooCommerce is installed on roughly 3,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.
CVE-2026-78260ePayco plugin for WooCommerce <= 8.4.6 - Unauthenticated SQL Injection
Read the full analysisVulnerability Records

ePayco plugin for WooCommerce
Author
ePayco
The official ePayco plugin enables seamless payment processing for your online store, allowing customers to complete their purchases using their preferred payment methods. Installation is straightforward and requires no technical expertise, so you can start selling immediately. Method Payments ePayco accepts Visa, MasterCard, American Express, Diners Club, SEPA, PSE (Bank Transfer), Cash (Efecty, Gana, Punto Red, Red Servi, Su Red, Paga todo, Acertemos, Gana Gana, Su Chance, Jer, La Perla), Daviplata, PayPal, SafetyPay, Davipuntos, Puntos Colombia (Coming soon) and more directly on your store with the ePayco plugin for WooCommerce, allowing payments for mobile and desktop. Also, ePayco supports 3D-Secure v 2.2. Why Choose ePayco? ePayco has no setup fees, no hidden costs: you only get charged when you earn money! Earnings are transferred to you quickly. Easily convert your product prices between Colombian pesos and U.S. dollars. Offer installment payments and highlight current promotions. Test your store in our Sandbox environment before going live. Receive your sales revenue on the same day. ePayco customers can use their stored cards for quick and easy checkout without re-entering card details. Focus on selling while ** we handle security with our advanced fraud prevention and analysis tools.** Sell more with the paid market Leave your details to talk to our team of experts (currently available only for Colombia). Additional Info Contribute to the repository on GitHub: Visit the GitHub repository
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C