Vulnerabilities in razorpay
6 resultsVexday analysis
Razorpay apresenta 4 vulnerabilidades catalogadas, nenhuma em exploração ativa ou crítica, dominadas por falhas de Cross-Site Scripting (CWE-79). O acervo não foi atualizado nos últimos 90 dias, indicando risco legado de baixa atenção imediata para decisões de segurança.
CVE-2024-10851MEDIUMRazorpay Payment Button <= 2.4.6 - Reflected Cross-Site ScriptingEPSS 0.5%CVE-2024-10850MEDIUMRazorpay Payment Button for Elementor <= 1.2.5 - Reflected Cross-Site ScriptingEPSS 0.5%CVE-2025-14294MEDIUMRazorpay for WooCommerce <= 4.7.8 - Missing Authentication to Unauthenticated Order ModificationEPSS 0.4%CVE-2024-13827MEDIUMRazorpay Subscription Button Elementor Plugin <= 1.0.3 - Reflected Cross-Site Scripting via add_query_arg and remove_query_arg FunctionsEPSS 0.3%CVE-2026-74009MEDIUMWordPress Razorpay for WooCommerce plugin <= 4.8.7 - Insecure Direct Object References (IDOR) vulnerabilityEPSS 0.3%CVE-2026-39656MEDIUMWordPress Razorpay for WooCommerce plugin <= 4.8.2 - Broken Access Control vulnerabilityEPSS 0.2%