Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

Mercado Pago payments for WooCommerce — Vulnerabilities & Security Advisories 3

All 3 CVE vulnerabilities found in Mercado Pago payments for WooCommerce, with AI-generated Chinese analysis, references, and POCs.

Vendor: Mercado Pago

CVE IDTitleCVSSSeverityPublished
CVE-2026-3208 Mercado Pago payments for WooCommerce <= 8.7.11 - Missing Authorization to Unauthenticated PIX Payment QR Code Image Disclosure CWE-862 5.3 Medium2026-05-06
CVE-2024-3934 Mercado Pago payments for WooCommerce 7.3.0 - 7.6.1 - Authenticated (Subscriber+) Arbitrary File Download CWE-22 6.5 Medium2024-07-20
CVE-2022-45068 WordPress Mercado Pago payments for WooCommerce Plugin <= 6.3.1 is vulnerable to Cross Site Request Forgery (CSRF) CWE-352 4.3 Medium2023-03-01

All 3 known CVE vulnerabilities affecting Mercado Pago payments for WooCommerce with full Chinese analysis, references, and POCs where available.