CVE-2026-74009: Razorpay For Woocommerce

Medium severity, CVSS 5.3. EPSS: 0.3% chance of exploitation in the next 30 days.

Unauthenticated Insecure Direct Object References (IDOR) in Razorpay for WooCommerce <= 4.8.7 versions.

Affected products

• Razorpay Razorpay For Woocommerce: up to and including 4.8.7

Published 2026-08-18. Last modified 2026-08-20.