Stitch Express
Stitch Express has one disclosed vulnerability in the WordSec catalog, all reported in 2026; it remains unpatched as of August 2026. Their average CVSS score is 5.3, and the most serious one scores 5.3 out of 10.
The most common weakness is Missing Authorization, behind 1 of the records (100%).
The one issue recorded for Stitch Express has no published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2026.
All of these findings were reported by babyhack. Stitch Express is installed on roughly 400 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.9.7.
CVE-2026-73394Stitch Express <= 1.9.1 - Missing Authorization
Read the full analysisVulnerability Records

Stitch Express
Author
stitchexpress
Stitch Express is the simplest way for your business to get paid securely online with superior customer support at every step. What is Stitch Express? Stitch Express is a payment gateway that makes online payments better. Use Stitch Express to accept payments on your WooCommerce store reliably and securely with a full suite of High-converting payment methods: Apple Pay Google Pay Stitch Pay Later Capitec Pay Payments with any Mastercard or Visa card Stitch Express is powered by Stitch, who processes payments for South Africa’s biggest enterprises like Bash and the iStore. Stitch Express leverages this enterprise-grade technology and makes it easier to use for Woocommerce stores. Why Stitch Express? Human support: You’ll always talk to a person and receive personalized support Competitive pricing: Keeping your costs simple and low Secure, reliable payments: Powered by Stitch and PCI Level 1 Compliant Get started quickly: Super fast and completely digital onboarding Pricing Pricing is straightforward with Stitch Express. We charge: 2.95% on local, SA card transactions 3.4% on International card transactions 5.7% on Stitch Pay Later transactions 2% on Capitec Pay transactions* For customers who transact more than R100K per month, we offer custom pricing. Please contact express-support@stitch.money to discuss this. *All pricing is VAT exclusive Sign Up To use the Stitch Express plugin you’ll need an active Stitch Express account. It is super simple and completely FREE to set it up. Follow the easy steps below: Create your Stitch Express account by clicking this link Tell us a bit about your business Verify your account by uploading some documents, which you can see here You’re all set – checkout the installation guide to get set up on WooCommerce
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C