CoffeeCode – Checkout for Getnet and WooCommerce

CoffeeCode – Checkout for Getnet and WooCommerce has 3 disclosed vulnerabilities in the WordSec catalog, all reported in 2025; all 3 are fixed as of September 2026. Their average CVSS score is 5.5, and the most serious one scores 6.1 out of 10. 2025 was the busiest year with 3 disclosures.

The most common weakness is Cross-Site Scripting, behind 3 of the records (100%).

Every one of the 3 issues recorded for CoffeeCode – Checkout for Getnet and WooCommerce has a vendor fix available, so running the current release closes all known holes.

3 independent researchers contributed these findings, one record each. CoffeeCode – Checkout for Getnet and WooCommerce is installed on roughly 300 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.

Strategic Overview

Avg CVSSMedium

5.5/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all CoffeeCode – Checkout for Getnet and WooCommerce vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.1CVE-2025-30906

Plugin Oficial – Getnet para WooCommerce <= 1.7.3 - Reflected Cross-Site Scripting

Read the full analysis

Vulnerability Records

3 records


2025-04-01 00:00	Plugin Oficial – Getnet para WooCommerce <= 1.7.3 - Reflected Cross-Site Scripting CoffeeCode <= 1.7.3	`CVE-2025-30906`	6.1 Medium	João Pedro Soares de Alcântara	Yes
2025-03-07 00:00	Plugin Oficial – Getnet para WooCommerce <= 1.8.0 - Authenticated (Admin+) Stored Cross-Site Scripting CoffeeCode <= 1.8.0	`CVE-2025-1289`	4.4 Medium	Bob Matyas	Yes
2025-03-07 00:00	Plugin Oficial – Getnet para WooCommerce <= 1.8.0 - Reflected Cross-Site Scripting CoffeeCode <= 1.8.0	`CVE-2025-1303`	6.1 Medium	Hassan Khan Yusufzai - Splint3r7	Yes

Showing 1–3 of 3 reports

Latestv1.12.3

CoffeeCode – Checkout for Getnet and WooCommerce

Author

lisandragetnet

5.0(24)

100/100

Last Updated

2026-08-24 (19d ago)

Active Installs

300+

Downloads

20,544

Requires WP

6.1+

Requires PHP

8.2+

Tested up to

WP 7.1

Created

2021-10-07 (5y ago)

Requires Plugins

woocommercewoocommerce-extra-checkout-fields-for-brazil

CoffeeCode – Checkout for Getnet and WooCommerce. Built with development best practices, providing more agility, security, and sales conversion. Support: Coffee Code. Documentation. Not a Getnet customer yet? SIGN UP DIRECTLY HERE You will be redirected to the Getnet website, where you must provide your CPF/CNPJ and proceed with signing up for the Getpay Advanced e-commerce package. Requirements PHP version 8.2 or higher. WooCommerce version 7.0.x or higher. Brazilian Market on WooCommerce. Payment methods Credit card. Boleto. PIX. Instalação Faça upload deste plugin em seu WordPress, e ative-o; Entre no menu lateral “WooCommerce > Configurações > Getnet”; Adicione o Seller ID, Cliente ID e Client Secret ( entre em contato com a Getnet e solicite ). Adicione Título, Descrição, Título do checkout, Status do pedido e habilite o metódo, depois salve alterações.

View on WordPress.org