Visma Pay for Woocommerce
Visma Pay for Woocommerce has one disclosed vulnerability in the WordSec catalog, all reported in 2026; it is fixed as of October 2026. Their average CVSS score is 5.3, and the most serious one scores 5.3 out of 10.
The most common weakness is Insufficient Verification Of Data Authenticity, behind 1 of the records (100%).
The one issue recorded for Visma Pay for Woocommerce has a vendor fix available, so running the current release closes it.
All of these findings were reported by Naoki Kawahigashi. Visma Pay for Woocommerce is installed on roughly 1,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.3.
CVE-2026-103308Visma Pay for Woocommerce < 1.2.2 - Unauthenticated Payment Bypass
Read the full analysisVulnerability Records
Visma Pay for Woocommerce
Author
vismapay
Visma Pay plugin allows you to accept e-payments through most Finnish banks, credit cards, credit invoices and wallets. This plugin uses the Visma Pay Payment API. This is a plugin for integrating Visma Pay payment gateway with your Woocommerce store. To accept payments with this plugin, you need to have an active contract with Visma Pay. You can order Visma Pay here (see terms). Supported payment methods Nordea, Osuuspankki, Danskebank, Aktia, Säästöpankki, Paikallisosuuspankki, Handelsbanken, S-Pankki, Ålandsbanken, Oma Säästöpankki, Visa, Mastercard, Jousto, MobilePay, Alisa Lasku, Alisa Yrityslasku, OP Lasku, Pivo and Siirto.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C