RA
Vendor
razorpay
11
CVEs
0
On KEV
2
New 30D
Products
RP7.1
Razorpay Payment Button Elementor Plugin
razorpay
2 CVEs0 on KEV1 new
IF5.3
IFSC
Razorpay
1 CVEs0 on KEV1 new
RF5.3
Razorpay for WooCommerce
razorpay
3 CVEs0 on KEV0 new
RP7.1
Razorpay Payment Button
Razorpay
3 CVEs0 on KEV0 new
RP6.1
Razorpay Payment Button Plugin
razorpay
1 CVEs0 on KEV0 new
RS6.1
Razorpay Subscription Button Elementor Plugin
razorpay
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-54866 New | RP Razorpay Payment Button Elementor Plugin Razorpay | 7.1 | Oct 29 | WordPress Razorpay Payment Button Elementor Plugin plugin <= 1.2.8 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-110222 | IF IFSC Razorpay | 5.3 | Oct 13 | Razorpay IFSC Ruby gem through 2.0.62 SSRF via IFSC lookup |
| CVE-2026-94179 | RP Razorpay Payment Button Razorpay | 7.1 | Sep 23 | WordPress Razorpay Payment Button plugin <= 2.4.9 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-74009 | RF Razorpay for WooCommerce Razorpay | 5.3 | Aug 18 | WordPress Razorpay for WooCommerce plugin <= 4.8.7 - Insecure Direct Object References (IDOR) vulnerability |
| CVE-2026-39656 | RF Razorpay for WooCommerce Razorpay | 5.3 | Apr 8 | WordPress Razorpay for WooCommerce plugin <= 4.8.2 - Broken Access Control vulnerability |
| CVE-2025-14294 | RF Razorpay for WooCommerce razorpay | 5.3 | Feb 19 | Razorpay for WooCommerce <= 4.7.8 - Missing Authentication to Unauthenticated Order Modification |
| CVE-2024-13827 | RS Razorpay Subscription Button Elementor Plugin razorpay | 6.1 | Mar 5 | Razorpay Subscription Button Elementor Plugin <= 1.0.3 - Reflected Cross-Site Scripting via add_query_arg and remove_query_arg Functions |
| CVE-2024-10850 | RP Razorpay Payment Button Elementor Plugin razorpay | 6.1 | Nov 13 | Razorpay Payment Button for Elementor <= 1.2.5 - Reflected Cross-Site Scripting |
| CVE-2024-10851 | RP Razorpay Payment Button Plugin razorpay | 6.1 | Nov 13 | Razorpay Payment Button <= 2.4.6 - Reflected Cross-Site Scripting |
