Paymob for WooCommerce

Paymob for WooCommerce has one disclosed vulnerability in the WordSec catalog, all reported in 2026; it remains unpatched as of August 2026. Their average CVSS score is 5.3, and the most serious one scores 5.3 out of 10.

The most common weakness is Missing Authorization, behind 1 of the records (100%).

The one issue recorded for Paymob for WooCommerce has no published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2026.

All of these findings were reported by Sajjad Haqi. Paymob for WooCommerce is installed on roughly 5,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.

Strategic Overview

Avg CVSSMedium
5.3/ 10
Patch Coverage0%
Open

1

Fixed

0

Get automatic notifications for all Paymob for WooCommerce vulnerabilities before they are exploited.

Most severe open issueCVSS 5.3CVE-2026-56025

Paymob for WooCommerce <= 4.1.2 - Missing Authorization

Read the full analysis

Vulnerability Records

1 records
Showing 1–1 of 1 reports
Paymob for WooCommerce banner
Latestv4.1.10

Paymob for WooCommerce

Paymob

Author

Paymob

2.3(3)
46/100
Last Updated
2026-08-13 (1d ago)
Active Installs
5,000+
Downloads
82,284
Requires WP
5.0+
Requires PHP
7.0+
Tested up to
WP 7.1
Created
2023-11-19 (3y ago)
Requires Plugins
woocommerce

Why should you choose Paymob Checkout? Paymob Checkout is a secure, pre-built payment solution and the easiest way to integrate payments into your Woo store. We offer quick onboarding, seamless integration, and access to 20+ global and local payment methods, including Apple Pay and Google Pay. Enjoy quick payment options, superior customer service, and fast settlements. Key features Highest payment success rates We deliver industry-leading payment success rates, ensuring smoother transactions every time. 3DS OTP authentication Our 3DS one-time password (OTP) is embedded directly into the checkout, eliminating the need for redirection during authentication. Super-secure payments PCI-compliant, supporting 3D Secure transactions to protect cardholder data. Mobile-optimized design Built with a mobile-first approach. Fully customizable checkout Personalize the checkout experience by adding logos, business details (address & phone number), customising the background, and much more. Multiple Currency Support Accept payments in various currencies. Card Tokenization Securely store card details for easy and safe future transactions. Retry payment feature If the initial transaction fails, users can attempt payment up to three times, increasing their chances of success. Settlements We offer settlements within one business day (T+1) for most payment methods and instant settlements in select countries. For BNPL and more details on settlements and refunds, please see the FAQ section below. Insights at a glance: dashboards for data-driven decisions View transaction details and analytics. Initiate refunds directly from the dashboard. Check settlement summaries and available balance. Download reports on payments, settlements, and refunds. Control checkout customization. Manage your API Keys && Payment Methods.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C