Stripe Payment Plugin For Woocommerce Security Vulnerabilities and Issues — Stripe Payment Plugin For Woocommerce CVE List

WebtoffeeStripe Payment Plugin For Woocommerce

3 matches found

CVE•added 2024/01/19 9:31 a.m.•88 views

CVE-2024-0705

The Stripe Payment Plugin for WooCommerce (WordPress) is vulnerable to SQL Injection via the 'id' parameter in all versions up to 3.7.9 due to insufficient escaping and improper query preparation. Unauthenticated attackers can append additional SQL to extract sensitive data. A fix is available in...

9.8CVSS8.1AI score0.02635EPSS

Save

CVE•added 2023/08/31 5:33 a.m.•85 views

CVE-2023-3162

Affected software: Stripe Payment Plugin for WooCommerce (WordPress). Vulnerability: Authentication bypass due to insufficient verification of the user during Stripe checkout, leading to unauthenticated users potentially logging in as customers with existing orders. Affected versions: up to and i...

9.8CVSS9.5AI score0.0119EPSS

Save

CVE•added 2023/08/18 6:46 a.m.•69 views

CVE-2023-4040

The CVE-2023-4040 issue affects the Stripe Payment Plugin for WooCommerce for WordPress. It stems from a missing capability check in the eh_callback_handler function in versions up to and including 3.7.9, enabling unauthenticated attackers to modify the status of arbitrary WooCommerce orders. The...

5.3CVSS5.5AI score0.00459EPSS

Save