Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

1 record

Vendor: paymentplugins Component: Stripe For Woocommerce Clear all filters
TI-2021-16714 CVE-2021-39347 · GHSA-jv5v-gch6-hq4m

Stripe for WooCommerce 3.0.0 - 3.3.9 Missing Authorization Controls to Financial Account Hijacking

Priority LOW 21

The Stripe for WooCommerce WordPress plugin is missing a capability check on the save() function found in the ~/includes/admin/class-wc-stripe-admin-user-edit.php file that makes it possible for attackers to configure th…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.0067 Published 2021-10-04 No fix listed CWE-862