Vulnerabilities in Razorpay
9 resultsCVE-2024-10851MEDIUMRazorpay Payment Button <= 2.4.6 - Reflected Cross-Site ScriptingEPSS 0.5%CVE-2024-10850MEDIUMRazorpay Payment Button for Elementor <= 1.2.5 - Reflected Cross-Site ScriptingEPSS 0.5%CVE-2025-14294MEDIUMRazorpay for WooCommerce <= 4.7.8 - Missing Authentication to Unauthenticated Order ModificationEPSS 0.4%CVE-2026-110222MEDIUMRazorpay IFSC Ruby gem through 2.0.62 SSRF via IFSC lookupEPSS 0.4%CVE-2024-13827MEDIUMRazorpay Subscription Button Elementor Plugin <= 1.0.3 - Reflected Cross-Site Scripting via add_query_arg and remove_query_arg FunctionsEPSS 0.3%CVE-2026-74009MEDIUMWordPress Razorpay for WooCommerce plugin <= 4.8.7 - Insecure Direct Object References (IDOR) vulnerabilityEPSS 0.3%CVE-2026-94179HIGHWordPress Razorpay Payment Button plugin <= 2.4.9 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2026-54866HIGHWordPress Razorpay Payment Button Elementor Plugin plugin <= 1.2.8 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-39656MEDIUMWordPress Razorpay for WooCommerce plugin <= 4.8.2 - Broken Access Control vulnerabilityEPSS 0.2%