Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Accept Stripe Payments 2.1.4 Clear all filters
TI-2026-56200 CVE-2026-81424 · GHSA-4qcx-xfr8-6hf6

Accept Stripe Payments < 2.1.4 - Unauthenticated Product Substitution via IDOR

Priority LOW 30

The Accept Stripe Payments WordPress plugin before 2.1.4 does not verify that the product fulfilled when a checkout is completed matches the product the authoritative payment was actually made for, checking only that the…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00304 Published 2026-09-05 Fixed in 2.1.4 CWE-639
TI-2026-56199 CVE-2026-81423 · GHSA-rvj6-j43w-hcgw

Accept Stripe Payments < 2.1.4 - Open Redirect via IPN Handler

Priority LOW 20

The Accept Stripe Payments WordPress plugin before 2.1.4 does not validate a user-supplied URL before using it in a redirect, allowing unauthenticated attackers to redirect visitors to an arbitrary external website, whic…

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00297 Published 2026-09-05 Fixed in 2.1.4 CWE-601