Payment Plugins Braintree For WooCommerce
Payment Plugins Braintree For WooCommerce has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it is fixed as of September 2026. Their average CVSS score is 7.5, and the most serious one scores 7.5 out of 10. Severity breakdown: 0 critical and 1 high.
The most common weakness is Authorization Bypass Through User-Controlled Key, behind 1 of the records (100%).
The one issue recorded for Payment Plugins Braintree For WooCommerce has a vendor fix available, so running the current release closes it.
All of these findings were reported by type5afe. Payment Plugins Braintree For WooCommerce is installed on roughly 2,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.4.
CVE-2025-12903Payment Plugins Braintree For WooCommerce <= 3.2.78 - Missing Authorization to Payment Token Exposure and Transaction Fraud
Read the full analysisVulnerability Records
Payment Plugins Braintree For WooCommerce
Author
Payment Plugins
Accept Credit Cards, PayPal, PayPal Credit, Google Pay, ApplePay, Venmo, and Local Payments like iDEAL all in one plugin for free! Official Partner Of Braintree Payment Plugins is an official partner of Braintree & PayPal and has worked closely with them to develop this solution. Boost conversion by offering product and cart page checkout Braintree for WooCommerce is made to supercharge your conversion rate by decreasing payment friction for your customer. Offer PayPal, Google Pay, Apple Pay on product pages, cart pages, and at the top of your checkout page. Features Fastlane Checkout Google Pay Apple Pay PayPal, PayPal Pay Later, PayPal Credit Venmo Credit Cards WooCommerce Blocks 3D Secure 2.0 & 1.0 iDEAL, P24, SEPA, WeChat, Giropay, & more SAQ A PCI Compliant Beautifully designed forms Create your own custom form Integrates with Woocommerce Integrates with Woocommerce Subscriptions 2.0.0+ Offer subscriptions without the WooCommerce Subscription plugin Integrations with WooCommerce currency switchers Add Custom fees Void transactions Automatic settlement or authorize transactions Issue refunds Dynamic descriptors Support For more information or questions, please email support@paymentplugins.com or read through our detailed documentation. Developer Docs Need to customize the plugin? It’s easy using our documentation. Code Examples && Developer Docs
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C