CVE-2026-104338 | Razorpay for WooCommerce Plugin up to 4.8.8 on WordPress Rest Routes authorization

November 8, 2026 Yanac

A vulnerability, which was classified as critical, was found in Razorpay for WooCommerce Plugin up to 4.8.8 on WordPress. Affected by this vulnerability is an unknown functionality of the component Rest Routes. Executing a manipulation can lead to missing authorization.

The identification of this vulnerability is CVE-2026-104338. The attack may be launched remotely. There is no exploit available.

You should upgrade the affected component.VulDB Recent EntriesRead More