High 7.1 Unfixed
2025-10-22≤ 1.8.6
CVE-2025-49958
Minimum safe version
1.6.2
Update to 1.6.2 or later to address 3 fixable vulnerabilities
CVE-2025-49958
CVE-2024-47395
Robokassa payment gateway for Woocommerce <= 1.4.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
WordPress Robokassa payment gateway for Woocommerce Plugin <= 1.4.5 is vulnerable to Cross Site Scripting (XSS)