Razorpay Payment Links for WooCommerce

Razorpay Payment Links for WooCommerce has 2 disclosed vulnerabilities in the WordSec catalog, all reported in 2026; all 2 are fixed as of October 2026. Their average CVSS score is 4.8, and the most serious one scores 5.3 out of 10. 2026 was the busiest year with 2 disclosures.

The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (50%). Other recurring categories include Missing Authorization.

Every one of the 2 issues recorded for Razorpay Payment Links for WooCommerce has a vendor fix available, so running the current release closes all known holes.

2 independent researchers contributed these findings, one record each. Razorpay Payment Links for WooCommerce is installed on roughly 900 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.2.

Strategic Overview

Avg CVSSMedium
4.8/ 10
Patch Coverage100%
Open

0

Fixed

2

Get automatic notifications for all Razorpay Payment Links for WooCommerce vulnerabilities before they are exploited.

Highest severity on recordCVSS 5.3CVE-2026-57424

Razorpay Payment Links for WooCommerce <= 2.1.4 - Missing Authorization

Read the full analysis

Vulnerability Records

2 records
Razorpay Payment Links for WooCommerce banner
Latestv2.2.0

Razorpay Payment Links for WooCommerce

KnitPay

Author

KnitPay

4.8(18)
96/100
Last Updated
2026-09-28 (21d ago)
Active Installs
900+
Downloads
43,058
Requires WP
4.6+
Requires PHP
7.2+
Tested up to
WP 7.2
Created
2020-01-25 (7y ago)
Requires Plugins
woocommerce

Razorpay Payment Links for WooCommerce This is the Razorpay Payment Gateway plugin for WooCommerce based on Razorpay Payment Links. Allows you to accept UPI, Credit Cards, Debit Cards, Netbanking, Wallets, and Apple Payment Payments with the WooCommerce plugin. It uses a Razorpay’s Payment Link API integration, allowing the customer to pay on your website being redirected to Razorpay’s Secure Payment Page. This allows for refunds, works across all browsers, and is compatible with the latest WooCommerce. Plugin Features WooCommerce High-Performance Order Storage (HPOS) Support. Collect Payments using Razorpay Payment Links. Ability to send Payment Links via SMS and Email notification to customers. One time Payment for your website. Customized “Order Received” message. Mode of transaction Live and Test Mode. Reference Order ID & Transaction ID. Auto Refund from WooCommerce Order Details Section. Instant Refund supported. Ability to set payment link expiry time. Easily Collect Gateway Fees from Customer. Ability to send Payment Reminder automatically. Secure Payment Capture Mechanism. 94 Razorpay Currency Support. Order note for every Transaction related process. Detailed Payment process Log via WooCommerce Logger. Lots of filters available to customize the output. Supports OAuth Integration. Integrates without API keys in just 2 clicks. Like Razorpay Payment Links for WooCommerce plugin? Consider leaving a 5 star review. Compatibility This plugin is fully compatible with WordPress Version 4.6 and beyond and also compatible with any WordPress theme. Support Community support via the support forums at WordPress.org. Contribute Active development of this plugin is handled on GitHub. Feel free to fork the project on GitHub and submit your contributions via pull request.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C