CVE-2023-51502

Authorization Bypass Through User-Controlled Key vulnerability in WooCommerce WooCommerce Stripe Payment Gateway.This issue affects WooCommerce Stripe Payment Gateway: from n/a through 7.6.1...

CVE-2023-51502

CVE-2023-51502 (WooCommerce Stripe Payment Gateway) enables Authorization Bypass Through User-Controlled Key via update_payment_intent_ajax, affecting WooCommerce Stripe Gateway up to version 7.6.1. The Wordfence entry confirms the vulnerability and notes patched status after remediation.

WordPress WooCommerce Stripe Payment Gateway Plugin <= 7.6.1 is vulnerable to Insecure Direct Object References (IDOR)

Software WooCommerce Stripe Payment Gateway Type Plugin Vulnerable versions = 7.6.1 Fixed in 7.6.2 OWASP Top 10 A1: Broken Access Control Classification Insecure Direct Object References IDOR CVE CVE-2023-51502 Patch priority Low CVSS severity Low 7.5 Developer Claim ownership PSID fccb1cf37427...