WordPress plugin
Razorpay Payment Button Elementor Plugin security & vulnerabilities
Unpatched vulnerability in the latest version
At least one vulnerability affects the latest version and no fix has been released. Deactivate the plugin or restrict access to the affected feature until the vendor ships a patch.
- Critical0
- High1
- Medium1
- Low0
All Razorpay Payment Button Elementor Plugin vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| High7.2 | Unauthenticated Stored Cross-Site Scripting ≤1.2.8No patch available | CVE-2026-54866 |
- High7.2Unauthenticated Stored Cross-Site Scripting
≤1.2.8No patch available
Razorpay Payment Button Elementor Plugin: common questions
Does Razorpay Payment Button Elementor Plugin have known vulnerabilities?
Yes. VulnCrest Radar lists 2 known vulnerabilities in Razorpay Payment Button Elementor Plugin: 1 high, 1 medium. At least one is not fixed in the latest version.
How do I check which version of Razorpay Payment Button Elementor Plugin I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Razorpay Payment Button Elementor Plugin vulnerability?
CVE-2026-54866, published Oct 13, 2026: Razorpay Payment Button Elementor Plugin <= 1.2.8 - Unauthenticated Stored Cross-Site Scripting. Severity: High (CVSS 7.2).
Is any Razorpay Payment Button Elementor Plugin vulnerability listed in CISA KEV?
No. None of the known Razorpay Payment Button Elementor Plugin vulnerabilities is currently listed in the CISA KEV catalog.