Records89All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical7CVSS 9.0–10.0
CVSS high40CVSS 7.0–8.9
Exploited now
WooCommerce records in CISA KEVNo WooCommerce vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority MEDIUM 49
Missing Authorization vulnerability in WooCommerce WooCommerce Stripe Payment Gateway.This issue affects WooCommerce Stripe Payment Gateway: from n/a through 7.4.0.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00614 · Published 2024-06-19 · No fix listed CWE-862
Priority MEDIUM 41
Unauth. IDOR vulnerability leading to PII Disclosure in WooCommerce Stripe Payment Gateway plugin <= 7.4.0 versions.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01214 · Published 2023-06-14 · No fix listed CWE-639
Priority LOW 38
Cross-Site Request Forgery (CSRF) vulnerability in WooCommerce WooCommerce Stripe Payment Gateway.This issue affects WooCommerce Stripe Payment Gateway: from n/a through 7.6.0.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00261 · Published 2024-03-27 · No fix listed CWE-352
