PT-2021-22553

Name of the Vulnerable Software and Affected Versions: Stripe for WooCommerce WordPress plugin versions 3.0.0 through 3.3.9 Description: The issue is related to a missing capability check on the save function found in the /includes/admin/class-wc-stripe-admin-user-edit.php file. This allows...

CVE-2021-39347: Missing Authorization

The Stripe for WooCommerce WordPress plugin is missing a capability check on the save function found in the /includes/admin/class-wc-stripe-admin-user-edit.php file that makes it possible for attackers to configure their account to use other site users unique STRIPE identifier and make purchases...