Lucene search
WpvulndbWPVDB-ID:E987660E-C872-4C87-B45B-46A273ADFF16HistoryAug 18, 2023 - 12:00 a.m.
Stripe Payment < 3.8.0 - Unauthenticated WC Order Status Update
2023-08-1800:00:00
wpscan.com
4
stripe payment
unauthenticated users
woocommerce orders
authorisation
security vulnerability
Description The plugin does not have authorisation in its eh_callback_handler function, allowing unauthenticated users to update the status of arbitrary WooCommerce orders
Related
cvelist
cvelist
CVE-2023-4040
2023-08-18 06:46:50
nvd
nvd
CVE-2023-4040
2023-08-18 07:15:09
cve
cve
CVE-2023-4040
2023-08-18 07:15:09
prion
prion
Design/Logic Flaw
2023-08-18 07:15:00
wordfence
wordfence
AI Score
6.6
Confidence
High
EPSS
0.001
Percentile
33.0%
Related for WPVDB-ID:E987660E-C872-4C87-B45B-46A273ADFF16