Skip to content
OpenAdvisories

Vendor

Mercado Pago

4 known vulnerabilities.

Products

Mercado Pago payments for WooCommerce 3 mercadopago 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.2
    CVE-2026-76842

    Mercado Pago Node.js SDK through 3.4.0 Path Injection via Unencoded Identifiers in Payment Clients

    The Mercado Pago Node.js SDK interpolates caller-supplied identifiers into API request paths without percent-encoding them, so characters that are structural in a URL survive into the outgoing request. The payment (get, capture, cancel), paymentRefund (create…

    Mercado Pago mercadopago