Mercado Pago payments for WooCommerce icon

Mercado Pago payments for WooCommerce

Integrates Mercado Pago as a payment method for WooCommerce stores. With over 100,000 active installations and a top 1% global ranking among all WordPress plugins, this gateway has established presence in e-commerce payment processing.

Generated on 8 Jul 2026. Score and stats mentioned may differ from current live data.

  • #611 Global Rank
  • 100K+ active installs
  • 3.9/5 691 ratings
  • Excellent support 8 threads
  • Since 2012 14 years active
Download Plugin Homepage (opens in a new tab) View on WordPress.org (opens in a new tab)

PF Score (About PF Scores)

PF Score is not a quality guarantee. It is a ranking based on available public signals.

Platinum85.4
Platinum
Gold
Silver
Bronze
Low

Score Breakdown

83.3
Popularity 40% 100K+ active installs
77.5
Reputation 35% 3.9★ from 691 ratings
99.9
Freshness 25% Updated 2 days ago

No active penalty — 5 historical CVEs, resolved — details

Download Trends

Loading download data…

Vulnerabilities

5 Total
5 Patched
0 Active
100% Resolved rate
Mercado Pago payments for WooCommerce <= 8.9.0 - Unauthenticated Insecure Direct Object Reference (opens in a new tab)
CWE-639 · Authorization Bypass Through User-Controlled Key

The Mercado Pago payments for WooCommerce plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 8.9.0 due to missing validation on a user controlled key. This makes it possible for unauthenticated attackers to perform an unauthorized action.

5.3 Medium Affected All – 8.9.0 Patched in ✓ 8.9.1 Published 5 Aug 2026 CVE CVE-2026-28180
Mercado Pago payments for WooCommerce <= 8.7.11 - Missing Authorization to Unauthenticated PIX Payment QR Code Image Disclosure (opens in a new tab)
CWE-862 · Missing Authorization

The Mercado Pago payments for WooCommerce plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'mp_pix_image' WooCommerce API endpoint in all versions up to, and including, 8.7.11. This makes it possible for unauthenticated attackers to retrieve PIX payment QR code images for arbitrary orders. PIX QR codes contain sensitive merchant information including PIX keys (which may be CPF/CNPJ personal identifiers), transaction amounts, merchant name and city, and MercadoPago transaction references.

5.3 Medium Affected All – 8.7.11 Patched in ✓ 8.7.12 Published 5 May 2026 CVE CVE-2026-3208
Mercado Pago payments for WooCommerce 7.3.0 - 7.6.1 - Authenticated (Subscriber+) Arbitrary File Download (opens in a new tab)
CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

The Mercado Pago payments for WooCommerce plugin for WordPress is vulnerable to Path Traversal in versions 7.3.0 to 7.5.1 via the mercadopagoDownloadLog function. This makes it possible for authenticated attackers, with subscriber-level access and above, to download and read the contents of arbitrary files on the server, which can contain sensitive information. The arbitrary file download was patched in 7.5.1, while the missing authorization was corrected in version 7.6.2.

6.5 Medium Affected 7.3.0 – 7.6.1 Patched in ✓ 7.6.2 Published 19 Jul 2024 CVE CVE-2024-3934
Mercado Pago payments for WooCommerce <= 6.3.1 - Cross-Site Request Forgery (opens in a new tab)
CWE-352 · Cross-Site Request Forgery (CSRF)

The Mercado Pago payments for WooCommerce plugin is vulnerable to Cross-Site Request Forgery in versions up to, and including, 6.6.0. This is due to missing or incorrect nonce validation on the multiple functions. This makes it possible for unauthenticated attackers to trick other users or visitors into creating or processing payments via a forged request.

4.3 Medium Affected All – 6.3.1 Patched in ✓ 6.4.0 Published 6 Feb 2023 CVE CVE-2022-45068
Mercado Pago payments for WooCommerce <= 6.6.0 - Cross-Site Request Forgery (opens in a new tab)
CWE-352 · Cross-Site Request Forgery (CSRF)

The Mercado Pago payments for WooCommerce plugin is vulnerable to Cross-Site Request Forgery in versions up to, and including, 6.6.0. This is due to missing or incorrect nonce validation on the 'process_payment' function. This makes it possible for unauthenticated attackers to trick other users or visitors into checking out via a forged request.

4.3 Medium Affected All – 6.6.0 Patched in ✓ 6.7.0 Published 23 Jan 2023

Vulnerability data provided by Wordfence Intelligence (opens in a new tab). CVE data: Copyright 1999–2026 The MITRE Corporation. CVE Terms of Use (opens in a new tab).

Support Statistics

8 Support threads
8 Resolved
100% Resolution rate

About Mercado Pago payments for WooCommerce

Offer to your clients the best experience in e-Commerce by using Mercado Pago as your payment method.

The official Mercado Pago plugin allows you to process payments for your online store, allowing users to finalize their purchase with their preferred payment method.

To install it, you don’t need to have technical knowledge: you can follow the step by step of how to integrate it. from our developer website and start selling today.

Warning about v6.0.0: when updating, if you have made custom layout changes to your checkout, it is possible that some of those customizations become misconfigured. If you have a separate store environment just for testing, please update there first in order to visualize and test the changes.

What to do with the Mercado Pago Plugin?

  • Activate Checkout Pro to offer logged-in payments with money in Mercado Pago account, saved cards and off means.
  • Offer payments without the need of having a Mercado Pago account, through the Custom Checkout for cards and off means, such as cash, bank transfer and PIX (only in Brazil).
  • Automatically convert the currency of your products: from Mexican pesos to U.S. dollars and vice versa.
  • Sell in installments and offer the current promotions in Checkout Pro or apply your own discount coupon in Custom Checkout.
  • Test your store before going into production with our Sandbox environment.
  • Receive the money from your sales on the same day.
  • IMPORTANT: At the moment the Mercado Envios service is deactivated.
  • Mercado Pago customers can use already stored cards For your customers who use Mercado Pago to buy without having to fill in card details at the store’s checkout.

Adapted to your business

Prepared for any type of store and category: electronics, clothing, kitchen, bazaar, whatever you want!
Just focus on selling and we’ll take care of the security: keep your store’s payments protected with our fraud prevention and analysis tool.

Boost your sales with Mercado Pago payments for WooCommerce!

Sell more with the paid market

Leave your details to talk to our team of experts and understand how to sell more (for now only available for Brazil).

Screenshots

RECEIVE THE MONEY FROM YOUR SALES ON THE SAME DAY

RECEIVE THE MONEY FROM YOUR SALES ON THE SAME DAY

This is what the Checkout Pro looks like in your store. You can choose between a modal experience or a redirect experience.

This is what the Checkout Pro looks like in your store. You can choose between a modal experience or a redirect experience.

This is what the Customized Checkout looks like in your store. You can activate payments with cards and also cash.

This is what the Customized Checkout looks like in your store. You can activate payments with cards and also cash.

Once you install the Mercado Pago Plugin, you will find the 3 checkouts available in the Payment settings in WooCommerce. You can activate them simultaneously or choose one of them. Remember that they must be configured before enabling them.

Once you install the Mercado Pago Plugin, you will find the 3 checkouts available in the Payment settings in WooCommerce. You can activate them simultaneously or choose one of them. Remember that they must be configured before enabling them.

To configure it, follow the step by step indicated in each Checkout. Remember that you can review the official documentation of our plugin on the Mercado Pago developer website.

To configure it, follow the step by step indicated in each Checkout. Remember that you can review the official documentation of our plugin on the Mercado Pago developer website.

ACCEPT ALL PAYMENT METHODS

ACCEPT ALL PAYMENT METHODS

Frequently Asked Questions

I had a question during setup, where can I check the documentation?

In our developer website you will find the step by step of how to integrate the Mercado Pago Plugin in your online store.

What are the requirements for the plugin to work properly?

You must have an SSL certificate, connecting your website with the HTTPS protocol.

If you need to check the protocol configuration, test it here.

Finally, remember that the plugin receives IPN (Instant Payment Notification) notifications automatically, you don’t need to configure it!

I already finished the configuration but the Sandbox environment is not working.

Remember that to test the Checkout Pro you must log out of your Mercado Pago account, as it is not possible to use it to sell and buy at the same time.

Please note that with the Test Environment enabled, the Checkout Pro does not send notifications as does the Custom Checkout.

How do I configure the sending of emails to my customers?

The configuration of sending emails must be done from the WooCommerce administrator. The Mercado Pago Plugin only contemplates sending transactions made in the Checkout Pro.

I reviewed the documentation and these FAQs but still have problems in my store, what can I do?

If you have already reviewed the documentation and have not found a solution, you can contact our support team through their contact form. Please note that we guarantee a response within {7 days} of your query.

How can I set up PIX as a payment method?

PIX is a payment method that exists only in Brazil.

To enable PIX as a payment method in the Custom Checkout of your store, you need to have your key registered in Mercado Pago. See how to do it.

After registering the key, log into the WooCommerce administrator and navigate to the Payments section.

Look for the option Pague com PIX, configure it and activate PIX.

You can set up a time limit for customers to pay after they receive the code, among other settings.

Ratings & Reviews

Recent Reviews

Loading reviews…

View all reviews on WordPress.org (opens in a new tab)

Alternatives to Mercado Pago payments for WooCommerce

Other WordPress plugins serving a similar purpose, ranked by relevance and PF Score.

Platinum89.3
TI WooCommerce Wishlist icon

TI WooCommerce Wishlist

Enables WooCommerce customers to save and share their favorite products via wishlists.

★ 4.7/5·100K+ installs·Updated 24 Jun 2026
Platinum96.3
WooCommerce icon

WooCommerce

Complete e-commerce platform for launching and growing online stores on WordPress.

★ 4.5/5·7.0M+ installs·Updated 10 Aug 2026
Platinum93.3
CartFlows – Funnel Builder & Checkout Plugin for WooCommerce icon

CartFlows

WooCommerce funnel builder enabling one-click upsells, order bumps, and checkout optimization.

★ 4.8/5·200K+ installs·Updated 11 Aug 2026
Platinum92.9
Variation Swatches for WooCommerce icon

Variation Swatches for WooCommerce

Replaces WooCommerce variation dropdowns with visual color, image, and button swatches for product attributes.

★ 4.8/5·300K+ installs·Updated 8 Jun 2026
Platinum92.5
User Switching icon

User Switching

Switch between user accounts instantly in WordPress and WooCommerce without logging out.

★ 4.9/5·200K+ installs·Updated 9 Jul 2026
Platinum91.4
WP Crontrol icon

WP Crontrol

Provides direct control and visibility over WordPress scheduled cron events and their execution history.

★ 4.5/5·300K+ installs·Updated 31 Jul 2026
Platinum90.7
Customer Reviews for WooCommerce icon

Customer Reviews for WooCommerce

Automate review collection through post-purchase reminders to boost customer feedback and sales.

★ 4.8/5·80K+ installs·Updated 3 Aug 2026