Razorpay Subscription Button Elementor Plugin
Razorpay Subscription Button Elementor Plugin has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it is fixed as of September 2026. Their average CVSS score is 6.1, and the most serious one scores 6.1 out of 10.
The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).
The one issue recorded for Razorpay Subscription Button Elementor Plugin has a vendor fix available, so running the current release closes it.
All of these findings were reported by Peter Thaleikis. Razorpay Subscription Button Elementor Plugin is installed on roughly 30 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.7.7.
CVE-2024-13827Razorpay Subscription Button Elementor Plugin <= 1.0.3 - Reflected Cross-Site Scripting via add_query_arg and remove_query_arg Functions
Read the full analysisVulnerability Records
Razorpay Subscription Button Elementor Plugin
Author
Razorpay
A very simple elementor widget block native to the wordpress that lets you add a convenient button on your wordpress page. This widget is like any other wordpress plugin and can be found immediately in the widgets section. These are the features that you will get without any premium paywalls Payments via Razorpay Subscription Button that allows you to accept recurring via subscriptions. Allows you to collect recurring payments via subscriptions based on the suggested plans. Eliminates the time and effort spent in a full-fledged payment gateway integration. No hops – your customer pays on the same page and doesn’t get redirected to a different page No extra login required for the customer to pay Fully editable form fields Logo and brand colour of your liking Collect payments in 100 currencies 4 button styles FREE payment receipt that goes to your customers Highest security standards in PCI-DSS Compliance Supports only cards for subscription payments. Dependencies WordPress v5.7 and later Support Visit https://razorpay.com for support requests or email contact@razorpay.com. License The Razorpay Subscription Button Elementor plugin is released under the GPLv2 license, same as that of WordPress. See the LICENSE file for the complete LICENSE text.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C