Stripe Payment Plugin for WooCommerce vulnerabilities

Product

Stripe Payment Plugin for WooCommerce

by webtoffee · last CVE Jan 19, 2024

CVEs

On KEV

9.8

Max CVSS

New 30D

Severity mix

Critical 1High 1Medium 1Low 0

Severity

Exploitation

Watch

Add Stripe Payment Plugin for WooCommerce to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2023-3162	9.8	1%	Aug 31	Stripe Payment Plugin for WooCommerce <= 3.7.7 - Authentication Bypass Affected: through 3.7.7
CVE-2024-0705	7.5	3%	Jan 19	Stripe Payment Plugin for WooCommerce <= 3.7.9 - Unauthenticated SQL Injection Affected: before 3.8.0
CVE-2023-4040	5.3	0%	Aug 18	The Stripe Payment Plugin for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the eh_callback_handler… Affected: 3.7.9