Lucene search

K
wpvulndbWpvulndbWPVDB-ID:C69AF866-1A6E-45B4-9176-AFD61F27B862
HistoryNov 28, 2023 - 12:00 a.m.

Accept Stripe Payments < 2.0.80 - Insecure Direct Object Reference

2023-11-2800:00:00
wpscan.com
6
stripe payments
wordpress
unauthorized modification
data
capability check
handle_create_pi()
unauthenticated
attackers
purchase
another currency
lower amounts

6.9 Medium

AI Score

Confidence

Low

0 Low

EPSS

Percentile

0.0%

Description The Stripe Payments plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the handle_create_pi() function in versions up to, and including, 2.0.79. This makes it possible for unauthenticated attackers to purchase products in another currency which may result in attackers paying lower amouns than they should be.

CPENameOperatorVersion
eq2.0.80

6.9 Medium

AI Score

Confidence

Low

0 Low

EPSS

Percentile

0.0%

Related for WPVDB-ID:C69AF866-1A6E-45B4-9176-AFD61F27B862