Skip to content
OpenAdvisories

Vendor

Mercado Pago

4 known vulnerabilities.

Products

Mercado Pago payments for WooCommerce 3 mercadopago 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 5.3
    CVE-2026-28180

    WordPress Mercado Pago payments for WooCommerce plugin <= 8.9.0 - Insecure Direct Object References (IDOR) vulnerability

    Unauthenticated Insecure Direct Object References (IDOR) in Mercado Pago payments for WooCommerce <= 8.9.0 versions.

    Mercado Pago Mercado Pago payments for WooCommerce Web / CMS
  • Medium 5.3
    CVE-2026-3208

    Mercado Pago payments for WooCommerce <= 8.7.11 - Missing Authorization to Unauthenticated PIX Payment QR Code Image Disclosure

    The Mercado Pago payments for WooCommerce plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'mp_pix_image' WooCommerce API endpoint in all versions up to, and including, 8.7.11. This makes it possible f…

    Mercado Pago Mercado Pago payments for WooCommerce Web / CMS
  • Medium 4.3
    CVE-2022-45068

    WordPress Mercado Pago payments for WooCommerce Plugin <= 6.3.1 is vulnerable to Cross Site Request Forgery (CSRF)

    Cross-Site Request Forgery (CSRF) vulnerability in Mercado Pago Mercado Pago payments for WooCommerce plugin <= 6.3.1.

    Mercado Pago Mercado Pago payments for WooCommerce Web / CMS