Vulnerabilities

TI-2023-17525 CVE-2023-35049 · GHSA-v5vh-9fjg-r9m7

WordPress WooCommerce Stripe Payment Gateway plugin <= 7.4.0 - Unauthenticated Broken Access Control vulnerability

MEDIUM 49

Missing Authorization vulnerability in WooCommerce WooCommerce Stripe Payment Gateway.This issue affects WooCommerce Stripe Payment Gateway: from n/a through 7.4.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00614 Published 2024-06-19 No fix listed CWE-862

TI-2023-24060 CVE-2023-44999 · GHSA-689f-q6h8-4mc5

WordPress WooCommerce Stripe Gateway plugin <= 7.6.0 - Cross Site Request Forgery (CSRF) vulnerability

LOW 38

Cross-Site Request Forgery (CSRF) vulnerability in WooCommerce WooCommerce Stripe Payment Gateway.This issue affects WooCommerce Stripe Payment Gateway: from n/a through 7.6.0.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00261 Published 2024-03-27 No fix listed CWE-352

TI-2023-16867 CVE-2023-34000 · GHSA-rmc6-47cp-m9gj

WordPress WooCommerce Stripe Payment Gateway Plugin <= 7.4.0 is vulnerable to Insecure Direct Object References (IDOR)

MEDIUM 41

Unauth. IDOR vulnerability leading to PII Disclosure in WooCommerce Stripe Payment Gateway plugin <= 7.4.0 versions.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01214 Published 2023-06-14 No fix listed CWE-639

Vulnerabilities

Filters

WordPress WooCommerce Stripe Payment Gateway plugin <= 7.4.0 - Unauthenticated Broken Access Control vulnerability

WordPress WooCommerce Stripe Gateway plugin <= 7.6.0 - Cross Site Request Forgery (CSRF) vulnerability

WordPress WooCommerce Stripe Payment Gateway Plugin <= 7.4.0 is vulnerable to Insecure Direct Object References (IDOR)