CVE-2026-57424
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk25th percentile - higher than 25% of all known CVEs
Summary
The Razorpay Payment Links for WooCommerce plugin (rzp-woocommerce) contains a missing authorization vulnerability that allows exploiting incorrectly configured access control security levels. This issue affects versions up to and including 2.1.4.
Risk Assessment
An attacker can gain unauthorized access to administrative functions or payment data, leading to confidentiality and integrity breaches of the WooCommerce system.
Recommendation
Immediately update the Razorpay Payment Links for WooCommerce plugin to the latest available version that fixes this vulnerability.
Other vulnerabilities in Razorpay Payment Links for WooCommerce
Original NVD description (English source)
Missing Authorization vulnerability in knitpay Razorpay Payment Links for WooCommerce rzp-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Razorpay Payment Links for WooCommerce: from n/a through <= 2.1.4.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS