Skip to content
OpenAdvisories

Vendor

Stripe for WooCommerce

1 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 4.3

    Stripe for WooCommerce 3.0.0 - 3.3.9 Missing Authorization Controls to Financial Account Hijacking

    The Stripe for WooCommerce WordPress plugin is missing a capability check on the save() function found in the ~/includes/admin/class-wc-stripe-admin-user-edit.php file that makes it possible for attackers to configure their account to use other site users uni…