Skip to content
OpenAdvisories
Medium · 5.4 CVE-2026-39645 EUVD-2026-20305GHSA-h45w-7h64-7676

WordPress GlobalPayments WooCommerce plugin <= 1.18.0 - Server Side Request Forgery (SSRF) vulnerability

Published Apr 8, 2026 · Updated Apr 29, 2026 · Assigned by Patchstack

Vendor: Global Payments Product: GlobalPayments WooCommerce Category: Web / CMS

Description

Server-Side Request Forgery (SSRF) vulnerability in Global Payments GlobalPayments WooCommerce global-payments-woocommerce allows Server Side Request Forgery.This issue affects GlobalPayments WooCommerce: from n/a through <= 1.18.0.

Affected products

VendorProductAffectedFixed
Global Payments GlobalPayments WooCommerce ≤ 1.18.0 —

References