Walletdoc Payment Gateway for WooCommerce
Walletdoc Payment Gateway for WooCommerce has one disclosed vulnerability in the WordSec catalog, all reported in 2026; it is fixed as of October 2026. Their average CVSS score is 7.5, and the most serious one scores 7.5 out of 10. Severity breakdown: 0 critical and 1 high.
The most common weakness is SQL Injection, behind 1 of the records (100%).
The one issue recorded for Walletdoc Payment Gateway for WooCommerce has a vendor fix available, so running the current release closes it.
All of these findings were reported by Naoki Kawahigashi. Walletdoc Payment Gateway for WooCommerce is installed on roughly 200 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.9.10.
CVE-2026-103307Walletdoc Payment Gateway for WooCommerce < 1.8.5 - Unauthenticated SQL Injection
Read the full analysisVulnerability Records

Walletdoc Payment Gateway for WooCommerce
Author
dwagnerwd
Accept card and Bank2Bank EFT payments on your store with the Walletdoc payment gateway for WooCommerce Features Supports debit card, credit card and Bank2Bank EFT 3D Secure Version 2 support Visa and Mastercard tokenisation support Secure card storage Supports reservation of funds Payment Card Industry (PCI) compliant Sign up with Walletdoc Sign up in minutes for Walletdoc business online or contact our sales team by logging a ticket at support@walletdoc.com
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C