WordPress plugin
Total processing card payments for WooCommerce security & vulnerabilities
Unpatched vulnerability in the latest version
At least one vulnerability affects the latest version and no fix has been released. Deactivate the plugin or restrict access to the affected feature until the vendor ships a patch.
- Critical0
- High2
- Medium2
- Low0
All Total processing card payments for WooCommerce vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| High7.2 | Unauthenticated Server-Side Request Forgery ≤7.3No patch available | CVE-2026-16947 | |
| Medium4.9 | Authenticated (Shop Manager+) Arbitrary File Download ≤7.1.7Update to 7.1.8 | CVE-2025-46486 | |
| Medium6.1 | Reflected Cross-Site Scripting ≤7.1.6Update to 7.1.7 | CVE-2025-32513 | |
| High8.1 | Authenticated (Subscriber+) Arbitrary File Download ≤7.1.5Update to 7.1.6 | CVE-2025-32209 |
- High7.2Unauthenticated Server-Side Request Forgery
≤7.3No patch available
- Medium4.9Authenticated (Shop Manager+) Arbitrary File Download
≤7.1.7Update to 7.1.8
- Medium6.1Reflected Cross-Site Scripting
≤7.1.6Update to 7.1.7
- High8.1Authenticated (Subscriber+) Arbitrary File Download
≤7.1.5Update to 7.1.6
Total processing card payments for WooCommerce: common questions
Does Total processing card payments for WooCommerce have known vulnerabilities?
Yes. VulnCrest Radar lists 4 known vulnerabilities in Total processing card payments for WooCommerce: 2 high, 2 medium. At least one is not fixed in the latest version.
How do I check which version of Total processing card payments for WooCommerce I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Total processing card payments for WooCommerce vulnerability?
CVE-2026-16947, published Aug 31, 2026: Total processing card payments for WooCommerce <= 7.3 - Unauthenticated Server-Side Request Forgery. Severity: High (CVSS 7.2).
Is any Total processing card payments for WooCommerce vulnerability listed in CISA KEV?
No. None of the known Total processing card payments for WooCommerce vulnerabilities is currently listed in the CISA KEV catalog.