Lucene search
PRIOn knowledge basePRION:CVE-2023-4040HistoryAug 18, 2023 - 7:15 a.m.
Design/Logic Flaw
2023-08-1807:15:00
PRIOn knowledge base
www.prio-n.com
2
stripe payment
woocommerce
wordpress
data modification
unauthorized access
order status.
The Stripe Payment Plugin for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the eh_callback_handler function in versions up to, and including, 3.7.9. This makes it possible for unauthenticated attackers to modify the order status of arbitrary WooCommerce orders.
| CPE | Name | Operator | Version |
|---|---|---|---|
| stripe_payment_plugin_for_woocommerce | lt | 3.8.0 |
Related
cve
cve
CVE-2023-4040
2023-08-18 07:15:09
cvelist
cvelist
CVE-2023-4040
2023-08-18 06:46:50
nvd
nvd
CVE-2023-4040
2023-08-18 07:15:09
wpvulndb
wpvulndb
Stripe Payment < 3.8.0 - Unauthenticated WC Order Status Update
2023-08-18 00:00:00
wordfence
wordfence