Sadad QA Payment
Sadad QA Payment has one disclosed vulnerability in the WordSec catalog, all reported in 2026; it is fixed as of November 2026. Their average CVSS score is 5.3, and the most serious one scores 5.3 out of 10.
The most common weakness is Client-Side Enforcement Of Server-Side Security, behind 1 of the records (100%).
The one issue recorded for Sadad QA Payment has a vendor fix available, so running the current release closes it.
All of these findings were reported by Naoki Kawahigashi. Sadad QA Payment is installed on roughly 200 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.4.
CVE-2026-103330Sadad QA Payment <= 1.28 - Payment Verification Bypass to Unauthenticated Arbitrary Order Payment Confirmation
Read the full analysisVulnerability Records
Sadad QA Payment
Author
sadaddev
This plugin is used to integrate Sadad QA Payment gateway with Woocommerce. Pay Your Order with Sadad is the simplest of the available ways to do payment integration to your website. The person who clicks the Pay via Sadad button will be taken to Pay with Sadad website where user will complete the payment using Credit Card, NAPS card, Sadad, Apple Pay or Google Pay and Pay with Sadad returns back the browser handle to the website after payment confirmation. Website will also receive a notification, which will be a server-to-server call as soon as the payment is done.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C