plugin

Stripe For Woocommerce Vulnerabilities

1 known security issue reported for the Stripe For Woocommerce WordPress plugin. Most recent disclosed Oct 1, 2021.

1 medium

Running Stripe For Woocommerce on your site? Check whether your installed version is affected.

Stripe for WooCommerce 3.0.0 - 3.3.9 - Missing Authorization Controls to Financial Account Hijacking

medium

The Stripe for WooCommerce WordPress plugin is missing a capability check on the save() function found in the ~/includes/admin/class-wc-stripe-admin-user-edit.php file that makes it possible for attackers to configure their account to use other site users unique STRIPE identifier and make purchases with their payment a...

CVSS:: 4.3
Affected:: 3.0.0 – 3.3.9
Fixed in:: 3.3.10
Disclosed:: Oct 1, 2021

CVE-2021-39347 on NVD →

Protect your WordPress site

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free

← Back to the vulnerability database