Stripe Payment Plugin for WooCommerce vulnerabilities

2 known vulnerabilities in Stripe Payment Plugin for WooCommerce from WebToffee. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Payment Gateway of Stripe for WooCommerce: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2024-0705Jan 19, 2024ThemeHighEPSS 2.63%

  The Stripe Payment Plugin for WooCommerce plugin for WordPress is vulnerable to SQL Injection via the 'id' parameter in all versions up to, and including, 3.7.9 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on t

• 9.8 Critical severity

  Payment Gateway of Stripe for WooCommerce: Authentication Bypass Using an Alternate Path or Channel

  CVE-2023-3162Aug 31, 2023ThemeHighEPSS 1.19%

  The Stripe Payment Plugin for WooCommerce plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 3.7.7. This is due to insufficient verification on the user being supplied during a Stripe checkout through the plugin. This