Razorpay Payment Links for WooCommerce
Razorpay Payment Links for WooCommerce has 2 disclosed vulnerabilities in the WordSec catalog, all reported in 2026; all 2 are fixed as of October 2026. Their average CVSS score is 4.8, and the most serious one scores 5.3 out of 10. 2026 was the busiest year with 2 disclosures.
The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (50%). Other recurring categories include Missing Authorization.
Every one of the 2 issues recorded for Razorpay Payment Links for WooCommerce has a vendor fix available, so running the current release closes all known holes.
2 independent researchers contributed these findings, one record each. Razorpay Payment Links for WooCommerce is installed on roughly 900 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.2.
CVE-2026-57424Razorpay Payment Links for WooCommerce <= 2.1.4 - Missing Authorization
Read the full analysisVulnerability Records

Razorpay Payment Links for WooCommerce
Author
KnitPay
woocommerceRazorpay Payment Links for WooCommerce This is the Razorpay Payment Gateway plugin for WooCommerce based on Razorpay Payment Links. Allows you to accept UPI, Credit Cards, Debit Cards, Netbanking, Wallets, and Apple Payment Payments with the WooCommerce plugin. It uses a Razorpay’s Payment Link API integration, allowing the customer to pay on your website being redirected to Razorpay’s Secure Payment Page. This allows for refunds, works across all browsers, and is compatible with the latest WooCommerce. Plugin Features WooCommerce High-Performance Order Storage (HPOS) Support. Collect Payments using Razorpay Payment Links. Ability to send Payment Links via SMS and Email notification to customers. One time Payment for your website. Customized “Order Received” message. Mode of transaction Live and Test Mode. Reference Order ID & Transaction ID. Auto Refund from WooCommerce Order Details Section. Instant Refund supported. Ability to set payment link expiry time. Easily Collect Gateway Fees from Customer. Ability to send Payment Reminder automatically. Secure Payment Capture Mechanism. 94 Razorpay Currency Support. Order note for every Transaction related process. Detailed Payment process Log via WooCommerce Logger. Lots of filters available to customize the output. Supports OAuth Integration. Integrates without API keys in just 2 clicks. Like Razorpay Payment Links for WooCommerce plugin? Consider leaving a 5 star review. Compatibility This plugin is fully compatible with WordPress Version 4.6 and beyond and also compatible with any WordPress theme. Support Community support via the support forums at WordPress.org. Contribute Active development of this plugin is handled on GitHub. Feel free to fork the project on GitHub and submit your contributions via pull request.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C