Payable Payment Gateway for WooCommerce

Payable Payment Gateway for WooCommerce has one disclosed vulnerability in the WordSec catalog, all reported in 2026; it is fixed as of November 2026. Their average CVSS score is 5.3, and the most serious one scores 5.3 out of 10.

The most common weakness is Missing Authorization, behind 1 of the records (100%).

The one issue recorded for Payable Payment Gateway for WooCommerce has a vendor fix available, so running the current release closes it.

All of these findings were reported by Enrico Marcolini. Payable Payment Gateway for WooCommerce is installed on roughly 100 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.4.

Strategic Overview

Avg CVSSMedium

5.3/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Payable Payment Gateway for WooCommerce vulnerabilities before they are exploited.

Highest severity on recordCVSS 5.3CVE-2026-94361

PAYable IPG <= 1.3.0 - Missing Authorization

Read the full analysis

Vulnerability Records

1 records


2026-10-29 00:00	PAYable IPG <= 1.3.0 - Missing Authorization Payable Payment Gateway for WooCommerce <= 1.3.0	`CVE-2026-94361`	5.3 Medium	Enrico Marcolini	Yes

Showing 1–1 of 1 reports

Latestv1.3.1

Payable Payment Gateway for WooCommerce

Author

payable

0.0(0)

0/100

Last Updated

2026-10-28 (7d ago)

Active Installs

100+

Downloads

3,565

Requires WP

Requires PHP

8.0+

Tested up to

WP 7.1.4

Created

2021-09-06 (5y ago)

Payable Payment Gateway for WooCommerce is a Sri Lankan Payment Gateway Service which allows you to accept payments online from your customers for your products and services via credit and debit cards. This online payment gateway plugin enables reliable online shopping experience for your customers and lets you sell products and services directly from your own website. You can simply install this plugin to list “Payable Online” as a payment method on your WooCommerce website in a few minutes and it requires no technical knowledge when setting up. This plugin is highly secured against online threats and hackers. It accepts all internationally recognised and acceptable cards. From where can I get the information to fill the Payable Payment Gateway Plugin – Settings form? Please contact our Payable Customer Support on +94 11 777 6 777 to sign up as a Payable IPG Merchant. Once you are successfully on boarded as a Payable IPG Merchant, you will receive an Email which contains the below information. 1. Test MerchantID 2. Test Auth Token 3. Live MerchantId 4. Live Auth Token Can my customers pay with any credit or debit card using this plugin? No. At the moment, we are supporting Visa, Mastercard, Amex, Diners Club and Discovery payments. Other payment types such as CUP and Lanka QR payments will be available very soon.

View on WordPress.org