Lucene search
+L

7 matches found

Circl
Circl
added 2023/08/31 12:13 p.m.7 views

CVE-2023-3162

creationtimestamp| type| source ---|---|--- 2023-08-31 12:13:11+00:00| seen| https://t.me/cibsecurity/69532 2026-06-19 12:46:50+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/5caddafb-1bed-4653-8d72-68bf5eb71551 2026-06-23 14:04:04+00:00| exploited|...

9.8CVSS7.3AI score0.00966EPSS
SaveExploits2References3
Cvelist
Cvelist
added 2023/08/31 5:33 a.m.73 views

CVE-2023-3162 Stripe Payment Plugin for WooCommerce <= 3.7.7 - Authentication Bypass

The Stripe Payment Plugin for WooCommerce plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 3.7.7. This is due to insufficient verification on the user being supplied during a Stripe checkout through the plugin. This allows unauthenticated attackers to...

9.8CVSS9.8AI score0.00966EPSS
SaveExploits2References3
CVE
CVE
added 2023/08/31 5:33 a.m.78 views

CVE-2023-3162

Affected software: Stripe Payment Plugin for WooCommerce (WordPress). Vulnerability: Authentication bypass due to insufficient verification of the user during Stripe checkout, leading to unauthenticated users potentially logging in as customers with existing orders. Affected versions: up to and i...

9.8CVSS9.5AI score0.00966EPSS
SaveExploits2References3Affected Software1
Patchstack
Patchstack
added 2023/08/02 12:0 a.m.28 views

WordPress Stripe Payment Gateway for WooCommerce Plugin <= 3.7.7 is vulnerable to Privilege Escalation

Software Stripe Payment Gateway for WooCommerce Type Plugin Vulnerable versions = 3.7.7 Fixed in 3.7.8 OWASP Top 10 A7: Identification and Authentication Failures Classification Privilege Escalation CVE CVE-2023-3162 Patch priority High CVSS severity High 9.8 Developer Claim ownership PSID...

9.8CVSS6.5AI score0.00966EPSS
SaveExploits2References3Affected Software1
Wordfence Blog
Wordfence Blog
added 2023/08/01 2:50 p.m.48 views

WebToffee Addresses Authentication Bypass Vulnerability in Stripe Payment Plugin for WooCommerce WordPress Plugin

On June 8, 2023, our Wordfence Threat Intelligence team identified and began the responsible disclosure process for an Authentication Bypass vulnerability in WebToffee’s Stripe Payment Plugin for WooCommerce plugin, which is actively installed on more than 10,000 WordPress websites. This...

7.6AI score0.00966EPSS
SaveExploits2
zdt
zdt
added 2023/08/01 12:0 a.m.343 views

WordPress Stripe Payment Plugin For WooCommerce 3.7.7 Authentication Bypass Vulnerability

WordPress Stripe Payment Plugin for WooCommerce plugin versions 3.7.7 and below suffer from an authentication bypass vulnerability. Affected Plugin: Stripe Payment Plugin for WooCommerce Plugin Slug: payment-gateway-stripe-and-woocommerce-integration Affected Versions: = 3.7.7 CVE ID: CVE-2023-31...

9.8CVSS9.9AI score0.00966EPSS
SaveExploits2
Packet Storm
Packet Storm
added 2023/08/01 12:0 a.m.313 views

WordPress Stripe Payment Plugin For WooCommerce 3.7.7 Authentication Bypass

Affected Plugin: Stripe Payment Plugin for WooCommerce Plugin Slug: payment-gateway-stripe-and-woocommerce-integration Affected Versions: = 3.7.7 CVE ID: CVE-2023-3162 CVSS Score: 9.8 Critical CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Researcher/s: Lana Codes Fully Patched Version...

7.1AI score0.00966EPSS
SaveExploits2
Rows per page
Query Builder