Read the docs

paymentplugins

Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

paymentplugins records in CISA KEV

No paymentplugins vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Stripe For Woocommerce 1 record LOW

Records

1 record in Stripe For Woocommerce · all components

TI-2021-16714 CVE-2021-39347 · GHSA-jv5v-gch6-hq4m

Stripe for WooCommerce 3.0.0 - 3.3.9 Missing Authorization Controls to Financial Account Hijacking

Priority LOW 21

The Stripe for WooCommerce WordPress plugin is missing a capability check on the save() function found in the ~/includes/admin/class-wc-stripe-admin-user-edit.php file that makes it possible for attackers to configure th…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.0067 Published 2021-10-04 No fix listed CWE-862
Open these records in search →