Medium · 5.3 CVE-2026-74009 EUVD-2026-60817GHSA-vqvx-w44w-grjh

WordPress Razorpay for WooCommerce plugin <= 4.8.7 - Insecure Direct Object References (IDOR) vulnerability

Published Aug 18, 2026 · Updated Aug 18, 2026 · Assigned by Patchstack

Vendor: Razorpay Product: Razorpay for WooCommerce Category: Web / CMS

Description

Unauthenticated Insecure Direct Object References (IDOR) in Razorpay for WooCommerce <= 4.8.7 versions.

Affected products

Vendor	Product	Affected	Fixed
Razorpay	Razorpay for WooCommerce	≤ 4.8.7	—

References

https://patchstack.com/database/wordpress/plugin/woo-razorpay/vulnerability/wordpress-razorpay-for-woocommerce-plugin-4-8-7-insecure-direct-object-references-idor-vulnerability?_s_id=cve vdb-entry