Mercado Pago payments for WooCommerce
Mercado Pago payments for WooCommerce has 5 disclosed vulnerabilities in the WordSec catalog, reported between 2023 and 2026; all 5 are fixed as of September 2026. Their average CVSS score is 5.1, and the most serious one scores 6.5 out of 10. 2026 was the busiest year with 2 disclosures.
The most common weakness is Cross-Site Request Forgery (CSRF), behind 2 of the records (40%). Other recurring categories include Authorization Bypass Through User-Controlled Key, Missing Authorization.
Every one of the 5 issues recorded for Mercado Pago payments for WooCommerce has a vendor fix available, so running the current release closes all known holes.
4 independent researchers contributed these findings, one record each. Mercado Pago payments for WooCommerce is installed on roughly 100,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.4.
CVE-2024-3934Mercado Pago payments for WooCommerce 7.3.0 - 7.6.1 - Authenticated (Subscriber+) Arbitrary File Download
Read the full analysisVulnerability Records
Mercado Pago payments for WooCommerce
Author
Mercado Pago
woocommerceThe official Mercado Pago plugin allows you to process payments for your online store, allowing users to finalize their purchase with their preferred payment method. To install it, you don’t need to have technical knowledge: you can follow the step by step of how to integrate it. from our developer website and start selling today. Warning about v6.0.0: when updating, if you have made custom layout changes to your checkout, it is possible that some of those customizations become misconfigured. If you have a separate store environment just for testing, please update there first in order to visualize and test the changes. What to do with the Mercado Pago Plugin? Activate Checkout Pro to offer logged-in payments with money in Mercado Pago account, saved cards and off means. Offer payments without the need of having a Mercado Pago account, through the Custom Checkout for cards and off means, such as cash, bank transfer and PIX (only in Brazil). Automatically convert the currency of your products: from Mexican pesos to U.S. dollars and vice versa. Sell in installments and offer the current promotions in Checkout Pro or apply your own discount coupon in Custom Checkout. Test your store before going into production with our Sandbox environment. Receive the money from your sales on the same day. IMPORTANT: At the moment the Mercado Envios service is deactivated. Mercado Pago customers can use already stored cards For your customers who use Mercado Pago to buy without having to fill in card details at the store’s checkout. Adapted to your business Prepared for any type of store and category: electronics, clothing, kitchen, bazaar, whatever you want! Just focus on selling and we’ll take care of the security: keep your store’s payments protected with our fraud prevention and analysis tool. Boost your sales with Mercado Pago payments for WooCommerce! Sell more with the paid market Leave your details to talk to our team of experts and understand how to sell more (for now only available for Brazil).
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C