7 matches found
CVE-2023-3162
creationtimestamp| type| source ---|---|--- 2023-08-31 12:13:11+00:00| seen| https://t.me/cibsecurity/69532 2026-06-19 12:46:50+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/5caddafb-1bed-4653-8d72-68bf5eb71551 2026-06-23 14:04:04+00:00| exploited|...
CVE-2023-3162 Stripe Payment Plugin for WooCommerce <= 3.7.7 - Authentication Bypass
The Stripe Payment Plugin for WooCommerce plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 3.7.7. This is due to insufficient verification on the user being supplied during a Stripe checkout through the plugin. This allows unauthenticated attackers to...
CVE-2023-3162
Affected software: Stripe Payment Plugin for WooCommerce (WordPress). Vulnerability: Authentication bypass due to insufficient verification of the user during Stripe checkout, leading to unauthenticated users potentially logging in as customers with existing orders. Affected versions: up to and i...
WordPress Stripe Payment Gateway for WooCommerce Plugin <= 3.7.7 is vulnerable to Privilege Escalation
Software Stripe Payment Gateway for WooCommerce Type Plugin Vulnerable versions = 3.7.7 Fixed in 3.7.8 OWASP Top 10 A7: Identification and Authentication Failures Classification Privilege Escalation CVE CVE-2023-3162 Patch priority High CVSS severity High 9.8 Developer Claim ownership PSID...
WebToffee Addresses Authentication Bypass Vulnerability in Stripe Payment Plugin for WooCommerce WordPress Plugin
On June 8, 2023, our Wordfence Threat Intelligence team identified and began the responsible disclosure process for an Authentication Bypass vulnerability in WebToffee’s Stripe Payment Plugin for WooCommerce plugin, which is actively installed on more than 10,000 WordPress websites. This...
WordPress Stripe Payment Plugin For WooCommerce 3.7.7 Authentication Bypass Vulnerability
WordPress Stripe Payment Plugin for WooCommerce plugin versions 3.7.7 and below suffer from an authentication bypass vulnerability. Affected Plugin: Stripe Payment Plugin for WooCommerce Plugin Slug: payment-gateway-stripe-and-woocommerce-integration Affected Versions: = 3.7.7 CVE ID: CVE-2023-31...
WordPress Stripe Payment Plugin For WooCommerce 3.7.7 Authentication Bypass
Affected Plugin: Stripe Payment Plugin for WooCommerce Plugin Slug: payment-gateway-stripe-and-woocommerce-integration Affected Versions: = 3.7.7 CVE ID: CVE-2023-3162 CVSS Score: 9.8 Critical CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Researcher/s: Lana Codes Fully Patched Version...