Global Payments vulnerabilities and threats

3 threats

Severity	CVSS	Signals	Threat	Source	Published
High	7.1		CVE-2026-118085GlobalPayments WooCommerce (WordPress plugin) · Cross-site Scripting High7.12026-10-29CVE Database V5CVE-2026-118085 CVE-2026-118085 is a high-severity vulnerability in GlobalPayments WooCommerce versions up to 1.23.3. It is an unauthenticated Cross Site Scripting (XSS) flaw caused by improper neutralization of input during web page generation. This vulnerability allows attackers to inject malicious scripts that can impact confidentiality, integrity, and availability. Vulnerability Global Payments CWE-79	CVE Database V5	2026-10-29
Medium	5.4	EPSS 0.2%	CVE-2026-39645GlobalPayments WooCommerce (WordPress plugin) · Server-Side Request Forgery (SSRF) Medium5.4EPSS 0.2%2026-04-08CVE Database V5CVE-2026-39645 Server-Side Request Forgery (SSRF) vulnerability in Global Payments GlobalPayments WooCommerce global-payments-woocommerce allows Server Side Request Forgery.This issue affects GlobalPayments WooCommerce: from n/a through <= 1.18.0. EPSS 0.2%Vulnerability Global Payments	CVE Database V5	2026-04-08
High	7.1	EPSS 0.2%	CVE-2025-22767GlobalPayments WooCommerce (WordPress plugin) · Cross-site Scripting High7.1EPSS 0.2%2025-03-28CVE Database V5CVE-2025-22767 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Global Payments GlobalPayments WooCommerce global-payments-woocommerce allows Reflected XSS.This issue affects GlobalPayments WooCommerce: from n/a through <= 1.13.2. EPSS 0.2%Vulnerability Global Payments	CVE Database V5	2025-03-28

Page 1 of 1