Synchrony Financing

Synchrony Financing has one disclosed vulnerability in the WordSec catalog, all reported in 2026; it is fixed as of October 2026. Their average CVSS score is 5.3, and the most serious one scores 5.3 out of 10.

The most common weakness is Incorrect Authorization, behind 1 of the records (100%).

The one issue recorded for Synchrony Financing has a vendor fix available, so running the current release closes it.

All of these findings were reported by Naoki Kawahigashi. Synchrony Financing is installed on roughly 80 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.3.

Strategic Overview

Avg CVSSMedium
5.3/ 10
Patch Coverage100%
Open

0

Fixed

1

Get automatic notifications for all Synchrony Financing vulnerabilities before they are exploited.

Highest severity on recordCVSS 5.3CVE-2026-100145

Synchrony Financing 1.0.5 - 1.1.1 - Missing Authorization

Read the full analysis

Vulnerability Records

1 records
Showing 1–1 of 1 reports
Plugin Profile
Latestv1.1.2

Synchrony Financing

syfwoocommerce

Author

syfwoocommerce

0.0(0)
0/100
Last Updated
2026-10-15 (9d ago)
Active Installs
80+
Downloads
2,921
Requires WP
5.3+
Requires PHP
7.2+
Tested up to
WP 7.1.3
Created
2024-07-26 (2y ago)

Synchrony (SYF) is a premier consumer financial services company delivering customized financing programs and award-winning banking products. We’re the largest provider of private label credit cards in the United States (based on purchase volume and receivables) and offer a diverse range of credit products, including co-branded credit cards, promotional financing, installment lending and loyalty programs, as well as FDIC-insured savings products through Synchrony Bank. Our investments in technology across multiple platforms—in-store, online and mobile—allow us to engage consumers when and where they want. Our programs and tools strengthen the relationship between our business partners and their customers, driving growth and opportunity across the board. Adding the Synchrony Extension to your WooCommerce payments page enables easy integration of our Synchrony solution, which offers consumers the opportunity to apply for revolving and installment financial products and to complete their purchase at checkout with a seamless apply and buy flow. All authorizations, captures and refunds are processed through WooCommerce. Privacy policy https://www.synchrony.com/s/legal/privacy-policy.html Terms and conditions https://www.synchrony.com/legal/terms-of-use

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C