Skip to content
OpenAdvisories

Vendor

paymentplugins

3 known vulnerabilities.

Products

Payment Plugins for Stripe WooCommerce 2 Payment Plugins Braintree For WooCommerce 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.1
    CVE-2026-89100

    Payment Plugins for Stripe WooCommerce <= 4.0.17 - Reflected DOM-Based Cross-Site Scripting via '#response' URL Fragment

    The Payment Plugins for Stripe WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via '#response' URL Fragment in all versions up to, and including, 4.0.17 due to insufficient input sanitization and output escaping. This makes it…

    paymentplugins Payment Plugins for Stripe WooCommerce Web / CMS
  • Medium 5.3
    CVE-2026-12654

    Payment Plugins for Stripe WooCommerce <= 4.0.7 - Missing Authorization to Unauthenticated Arbitrary Order Status Modification via Empty Webhook Secret

    The Payment Plugins for Stripe WooCommerce plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.0.7. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it p…

    paymentplugins Payment Plugins for Stripe WooCommerce Web / CMS