plugin

Pymntpl Paypal Woocommerce Vulnerabilities

2 known security issues reported for the Pymntpl Paypal Woocommerce WordPress plugin. Most recent disclosed Jul 6, 2026.

2 medium

Running Pymntpl Paypal Woocommerce on your site? Check whether your installed version is affected.

Scan your site free

Payment Plugins for PayPal WooCommerce <= 2.0.19 - Uanuthenticated Payment Bypass

medium

The Payment Plugins for PayPal WooCommerce plugin for WordPress is vulnerable to Payment Bypass in all versions up to, and including, 2.0.19. This makes it possible for unauthenticated attackers to bypass payments.

CVSS:
5.3
Affected:
up to 2.0.19
Fixed in:
2.0.20
Disclosed:
Jul 6, 2026

CVE-2026-13399 on NVD →

Payment Plugins for PayPal WooCommerce <= 2.0.13 - Missing Authorization

medium

The Payment Plugins for PayPal WooCommerce plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in versions up to, and including, 2.0.13. This makes it possible for unauthenticated attackers to perform an unauthorized action.

CVSS:
5.3
Affected:
up to 2.0.13
Fixed in:
2.0.14
Disclosed:
Feb 14, 2026

CVE-2026-39643 on NVD →

Protect your WordPress site

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free

← Back to the vulnerability database