Total processing card payments for WooCommerce

Total processing card payments for WooCommerce has 4 disclosed vulnerabilities in the WordSec catalog, reported between 2025 and 2026; 3 are fixed and 1 remains unpatched as of September 2026. Their average CVSS score is 6.6, and the most serious one scores 8.1 out of 10. Severity breakdown: 0 critical and 2 high. 2025 was the busiest year with 3 disclosures.

The most common weakness is Path Traversal, behind 2 of the records (50%). Other recurring categories include Cross-Site Scripting, Server-Side Request Forgery (SSRF).

3 of the records (75%) have a vendor fix, while 1 remain unpatched. The oldest unresolved one dates back to 2026.

4 independent researchers contributed these findings, one record each.

Strategic Overview

Avg CVSSMedium

6.6/ 10

Patch Coverage75%

Open

Fixed

Get automatic notifications for all Total processing card payments for WooCommerce vulnerabilities before they are exploited.

Most severe open issueCVSS 7.2CVE-2026-16947

Total processing card payments for WooCommerce <= 7.3 - Unauthenticated Server-Side Request Forgery

Read the full analysis

Vulnerability Records

4 records


2026-08-31 00:00	Total processing card payments for WooCommerce <= 7.3 - Unauthenticated Server-Side Request Forgery Total processing card payments… <= 7.3	`CVE-2026-16947`	7.2 High	Pablo González Pérez	No
2025-05-02 00:00	Nomupay Payment Processing Gateway <= 7.1.7 - Authenticated (Shop Manager+) Arbitrary File Download Total processing card payments… <= 7.1.7	`CVE-2025-46486`	4.9 Medium	astra.r3verii	Yes
2025-04-14 00:00	Nomupay Payment Processing Gateway <= 7.1.6 - Reflected Cross-Site Scripting Total processing card payments… <= 7.1.6	`CVE-2025-32513`	6.1 Medium	João Pedro Soares de Alcântara	Yes
2025-04-07 00:00	Nomupay Payment Processing Gateway <= 7.1.5 - Authenticated (Subscriber+) Arbitrary File Download Total processing card payments… <= 7.1.5	`CVE-2025-32209`	8.1 High	LVT-tholv2k	Yes

Showing 1–4 of 4 reports