Robokassa payment gateway for Woocommerce — Vulnerabilities & Security Advisories 5

All 5 CVE vulnerabilities found in Robokassa payment gateway for Woocommerce, with AI-generated Chinese analysis, references, and POCs.

Vendor: robokassa

CVE ID	Title	CVSS	Severity	Published
CVE-2026-91076	Robokassa payment for WooCommerce < 1.9.0 - Unauthenticated Arbitrary Order Status Change to Failed	-	-	2026-10-14
CVE-2026-91017	Robokassa payment gateway for Woocommerce < 1.8.9 - Unauthenticated Payment Bypass via Forged JWT Callback	3.7	Low	2026-09-17
CVE-2026-78536	WordPress Robokassa payment gateway for Woocommerce plugin <= 1.8.9 - Broken Access Control vulnerability CWE-862	6.5	Medium	2026-09-10
CVE-2025-49958	WordPress Robokassa payment gateway for Woocommerce plugin <= 1.8.6 - Cross Site Scripting (XSS) vulnerability CWE-79	7.1	High	2025-10-22
CVE-2024-47395	WordPress Robokassa payment gateway for Woocommerce plugin <= 1.6.1 - Reflected Cross Site Scripting (XSS) vulnerability CWE-79	7.1	High	2024-10-05

All 5 known CVE vulnerabilities affecting Robokassa payment gateway for Woocommerce with full Chinese analysis, references, and POCs where available.