Trust Payments Gateway for WooCommerce
Trust Payments Gateway for WooCommerce has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it is fixed as of September 2026. Their average CVSS score is 7.5, and the most serious one scores 7.5 out of 10. Severity breakdown: 0 critical and 1 high.
The most common weakness is SQL Injection, behind 1 of the records (100%).
The one issue recorded for Trust Payments Gateway for WooCommerce has a vendor fix available, so running the current release closes it.
All of these findings were reported by Phúc ton luoi. Trust Payments Gateway for WooCommerce is installed on roughly 400 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.4.
CVE-2025-28942Trust Payments Gateway for WooCommerce <= 1.1.4 - Unauthenticated SQL Injection
Read the full analysisVulnerability Records

Trust Payments Gateway for WooCommerce
Author
Trust Payments
woocommerceEasily add payment capabilities to your ecommerce website: Build a seamless, fully customised online payment experience with or without any redirects (hosted payment page or JavaScript plug-in available) Accept multiple payment types – credit/debit cards, Apple Pay/Google Pay. Easily process Mail Order Telephone Order (MOTO) transactions through the admin panel. The Trust Payments extension can integrate with multiple APIs to facilitate typical back-office functions such as transaction updates and refunds. Features With Trust Payments, merchants can: Accept all major payment cards (Visa, Mastercard, Amex, Diners/Discover) Offer recurring subscriptions Feature the gateway on your existing website by using a JavaScript Library integration Process payments securely on dedicated HTTPS server hosted by Trust Payments Reduce your level of PCI DSS compliance to the lowest possible level by not handling sensitive payment data Benefit from the Saved Cards feature, returning customers can save their card details for faster transactions in the future Customise your checkout page to reflect your brand and maintain great customer experience Accept a large variety of currencies and settle in 15 of these Deploy other new payment methods quickly with minimal configuration needed View and manage all transactions using our online portal including a Virtual Terminal for transactions not processed in-person Supports multiple languages for both the hosted payment and API flow. For further information on localisation please see https://help.trustpayments.com/hc/en-us/articles/4402728226321-Localisation
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C