Buckaroo Woocommerce Payments Plugin

Buckaroo Woocommerce Payments Plugin has one disclosed vulnerability in the WordSec catalog, all reported in 2026; it is fixed as of August 2026. Their average CVSS score is 4.3, and the most serious one scores 4.3 out of 10.

The most common weakness is Missing Authorization, behind 1 of the records (100%).

The one issue recorded for Buckaroo Woocommerce Payments Plugin has a vendor fix available, so running the current release closes it.

All of these findings were reported by Vaibhav Narkhede. Buckaroo Woocommerce Payments Plugin is installed on roughly 2,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.4.

Strategic Overview

Avg CVSSMedium

4.3/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Buckaroo Woocommerce Payments Plugin vulnerabilities before they are exploited.

Highest severity on recordCVSS 4.3CVE-2026-13329

WC Buckaroo BPE Gateway <= 4.8.0 - Missing Authorization to Authenticated (Subscriber+) Unauthorized Order Refund

Read the full analysis

Vulnerability Records

1 records


2026-07-20 00:00	WC Buckaroo BPE Gateway <= 4.8.0 - Missing Authorization to Authenticated (Subscriber+) Unauthorized Order Refund Buckaroo Woocommerce Payments Plugin <= 4.8.0	`CVE-2026-13329`	4.3 Medium	Vaibhav Narkhede	Yes

Showing 1–1 of 1 reports

Latestv4.9.0

Buckaroo Woocommerce Payments Plugin

Author

Rene Licher (Buckaroo)

4.7(6)

94/100

Last Updated

2026-07-14 (1mo ago)

Active Installs

2,000+

Downloads

87,118

Requires WP

5.3.18+

Requires PHP

Tested up to

WP 7.0.4

Created

2015-11-26 (11y ago)

The Buckaroo WooCommerce Payments plugin is a simple, effective solution for handling payments in your WooCommerce webshop. It supports a wide range of SEPA-compliant and international payment methods, is easy to install, and saves you valuable time. Improve your checkout experience and increase conversions – try the Buckaroo plugin today! Payment method support list by Buckaroo WooCommerce payments plugin Alipay Apple Pay Bancontact Belfius Billink Bizum Blik Cards (American Express, Visa, MasterCard, VPAY, Visa Electron, Maestro, Carte Bleue, Carte Bancaire, Dankort, Nexi, PostePay) EPS Giftcards Google Pay goSettle iDEAL | Wero In3 KBC Klarna MB Way Multibanco PayByBank Payconiq PayPal PayPerEmail Przelewy24 Riverty SEPA Credit Transfer (Bank transfer) SEPA Direct Debit Swish Trustly Twint WeChat Pay Wero (BE, DE, FR) Release notes For detailed release notes, please visit our GitHub repository. Contact Need help installing the WooCommerce plugin? Reach out to our technical support team at support@buckaroo.nl. Contributors & Developers The “Buckaroo Woocommerce Payments Plugin” has been translated into 3 locales. Thank you to the translators for their contributions! Translate “Buckaroo Woocommerce Payments Plugin” into your language.

View on WordPress.org