High · 7.5 CVE-2023-35049 EUVD-2023-39085GHSA-v5vh-9fjg-r9m7

WordPress WooCommerce Stripe Payment Gateway plugin <= 7.4.0 - Unauthenticated Broken Access Control vulnerability

Published Jun 19, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: woocommerce Product: WooCommerce Stripe Payment Gateway Category: Web / CMS

Description

Missing Authorization vulnerability in WooCommerce WooCommerce Stripe Payment Gateway.This issue affects WooCommerce Stripe Payment Gateway: from n/a through 7.4.0.

Affected products

Vendor	Product	Affected	Fixed
WooCommerce	WooCommerce Stripe Payment Gateway	≤ 7.4.0	—

References

https://patchstack.com/database/vulnerability/woocommerce-gateway-stripe/wordpress-woocommerce-stripe-payment-gateway-plugin-7-4-0-unauthenticated-broken-access-control-vulnerability?_s_id=cve vdb-entry