WordPress plugin

GlobalPayments Gateway Provider for WooCommerce security & vulnerabilities

Q: Is any GlobalPayments Gateway Provider for WooCommerce vulnerability listed in CISA KEV?

No. None of the known GlobalPayments Gateway Provider for WooCommerce vulnerabilities is currently listed in the CISA KEV catalog.

global-payments-woocommerce— active installsLast vulnerability Oct 28, 2026

Unpatched vulnerability in the latest version

At least one vulnerability affects the latest version and no fix has been released. Deactivate the plugin or restrict access to the affected feature until the vendor ships a patch.

Watch plugin

3Known vulnerabilities

Critical0
High2
Medium1
Low0

Vulnerabilities per year

All GlobalPayments Gateway Provider for WooCommerce vulnerabilities

GlobalPayments Gateway Provider for WooCommerce vulnerabilities
Severity	Vulnerability	CVE	Published
High7.2	Unauthenticated Stored Cross-Site Scripting ≤1.23.3No patch available	CVE-2026-118085	Oct 28
High7.2	Unauthenticated Server-Side Request Forgery ≤1.18.3Update to 1.18.4	CVE-2026-39645	Feb 15
Medium6.1	Reflected Cross-Site Scripting ≤1.13.2Update to 1.13.3	CVE-2025-22767	Mar 18, 2025

High7.2
Unauthenticated Stored Cross-Site Scripting
≤1.23.3No patch available
CVE-2026-118085Oct 28
High7.2
Unauthenticated Server-Side Request Forgery
≤1.18.3Update to 1.18.4
CVE-2026-39645Feb 15
Medium6.1
Reflected Cross-Site Scripting
≤1.13.2Update to 1.13.3
CVE-2025-22767Mar 18, 2025

GlobalPayments Gateway Provider for WooCommerce: common questions

Does GlobalPayments Gateway Provider for WooCommerce have known vulnerabilities?

Yes. VulnCrest Radar lists 3 known vulnerabilities in GlobalPayments Gateway Provider for WooCommerce: 2 high, 1 medium. At least one is not fixed in the latest version.

How do I check which version of GlobalPayments Gateway Provider for WooCommerce I run?

In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.

What is the most recent GlobalPayments Gateway Provider for WooCommerce vulnerability?

CVE-2026-118085, published Oct 28, 2026: GlobalPayments Gateway Provider for WooCommerce <= 1.23.3 - Unauthenticated Stored Cross-Site Scripting. Severity: High (CVSS 7.2).

Is any GlobalPayments Gateway Provider for WooCommerce vulnerability listed in CISA KEV?

No. None of the known GlobalPayments Gateway Provider for WooCommerce vulnerabilities is currently listed in the CISA KEV catalog.