Paymob for WooCommerce

Paymob for WooCommerce has 6 disclosed vulnerabilities in the WordSec catalog, all reported in 2026; all 6 are fixed as of October 2026. Their average CVSS score is 5.8, and the most serious one scores 7.5 out of 10. Severity breakdown: 0 critical and 2 high. 2026 was the busiest year with 6 disclosures.

The most common weakness is Missing Authorization, behind 3 of the records (50%). Other recurring categories include Client-Side Enforcement Of Server-Side Security, Cross-Site Scripting.

Every one of the 6 issues recorded for Paymob for WooCommerce has a vendor fix available, so running the current release closes all known holes.

6 independent researchers contributed these findings, one record each. Paymob for WooCommerce is installed on roughly 5,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.3.

Strategic Overview

Avg CVSSMedium
5.8/ 10
Patch Coverage100%
Open

0

Fixed

6

Get automatic notifications for all Paymob for WooCommerce vulnerabilities before they are exploited.

Highest severity on recordCVSS 7.5CVE-2026-15205

Paymob for WooCommerce <= 4.1.8 - Unauthenticated SQL Injection

Read the full analysis

Vulnerability Records

6 records
Paymob for WooCommerce banner
Latestv4.1.15

Paymob for WooCommerce

Paymob

Author

Paymob

3.0(4)
60/100
Last Updated
2026-10-05 (14d ago)
Active Installs
5,000+
Downloads
97,106
Requires WP
5.0+
Requires PHP
7.0+
Tested up to
WP 7.1.3
Created
2023-11-19 (3y ago)
Requires Plugins
woocommerce

Why should you choose Paymob Checkout? Paymob Checkout is a secure, pre-built payment solution and the easiest way to integrate payments into your Woo store. We offer quick onboarding, seamless integration, and access to 20+ global and local payment methods, including Apple Pay and Google Pay. Enjoy quick payment options, superior customer service, and fast settlements. Key features Highest payment success rates We deliver industry-leading payment success rates, ensuring smoother transactions every time. 3DS OTP authentication Our 3DS one-time password (OTP) is embedded directly into the checkout, eliminating the need for redirection during authentication. Super-secure payments PCI-compliant, supporting 3D Secure transactions to protect cardholder data. Mobile-optimized design Built with a mobile-first approach. Fully customizable checkout Personalize the checkout experience by adding logos, business details (address & phone number), customising the background, and much more. Multiple Currency Support Accept payments in various currencies. Card Tokenization Securely store card details for easy and safe future transactions. Retry payment feature If the initial transaction fails, users can attempt payment up to three times, increasing their chances of success. Settlements We offer settlements within one business day (T+1) for most payment methods and instant settlements in select countries. For BNPL and more details on settlements and refunds, please see the FAQ section below. Insights at a glance: dashboards for data-driven decisions View transaction details and analytics. Initiate refunds directly from the dashboard. Check settlement summaries and available balance. Download reports on payments, settlements, and refunds. Control checkout customization. Manage your API Keys && Payment Methods.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C