← Back

Paymentplugins

paymentplugins

1 CVE • 1 product

Products (1)

Click to collapse
Toggle
Stripe For Woocommerce
stripe_for_woocommerce
1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2021-39347
1Paymentplugins
1Stripe For Woocommerce
Jun 17, 2026
Oct 4, 2021
N/A· v4
4.3 MEDIUM· v3
4.0 MEDIUM· v2
The Stripe for WooCommerce WordPress plugin is missing a capability check on the save() function found in the ~/includes/admin/class-wc-stripe-admin-user-edit.php file that makes it possible for attackers to configure th...Show more
The Stripe for WooCommerce WordPress plugin is missing a capability check on the save() function found in the ~/includes/admin/class-wc-stripe-admin-user-edit.php file that makes it possible for attackers to configure their account to use other site users unique STRIPE identifier and make purchases with their payment accounts. This affects versions 3.0.0 - 3.3.9.Show less