Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: WebToffee Component: Stripe Payment Plugin For Woocommerce Clear all filters
TI-2024-00649 CVE-2024-0705 · GHSA-5jv7-xqc8-wq28

Stripe Payment Plugin for WooCommerce <= 3.7.9 - Unauthenticated SQL Injection

Priority MEDIUM 53

The Stripe Payment Plugin for WooCommerce plugin for WordPress is vulnerable to SQL Injection via the 'id' parameter in all versions up to, and including, 3.7.9 due to insufficient escaping on the user supplied parameter…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02635 Published 2024-01-19 No fix listed CWE-89
TI-2023-03748 CVE-2023-4040 · GHSA-6879-vfm4-hv3x

The Stripe Payment Plugin for WooCommerce plugin for WordPress is vulnerable to…

Priority LOW 30

The Stripe Payment Plugin for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the eh_callback_handler function in versions up to, and including, 3.…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00459 Published 2023-08-18 No fix listed