CVE-2026-74009

Razorpay for WooCommerce versions up to 4.8.7 are vulnerable to unauthenticated Insecure Direct Object References (IDOR), allowing attackers to access sensitive resources without proper authorization. This could lead to unauthorized data exposure or manipulation, impacting the integrity and confidentiality of user transactions. E-commerce platforms utilizing this plugin should prioritize remediation to safeguard customer data and maintain compliance.