Vendor
Stripe for WooCommerce
1 known vulnerabilities.
Products
1 result · Clear filters · Feed
-
Medium 4.3
Stripe for WooCommerce 3.0.0 - 3.3.9 Missing Authorization Controls to Financial Account Hijacking
The Stripe for WooCommerce WordPress plugin is missing a capability check on the save() function found in the ~/includes/admin/class-wc-stripe-admin-user-edit.php file that makes it possible for attackers to configure their account to use other site users uni…