Medium · 5.4 CVE-2023-44999 EUVD-2023-49321GHSA-689f-q6h8-4mc5

WordPress WooCommerce Stripe Gateway plugin <= 7.6.0 - Cross Site Request Forgery (CSRF) vulnerability

Published Mar 27, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: woocommerce Product: WooCommerce Stripe Payment Gateway Category: Web / CMS

Description

Cross-Site Request Forgery (CSRF) vulnerability in WooCommerce WooCommerce Stripe Payment Gateway.This issue affects WooCommerce Stripe Payment Gateway: from n/a through 7.6.0.

Affected products

Vendor	Product	Affected	Fixed
WooCommerce	WooCommerce Stripe Payment Gateway	≤ 7.6.0	—

References

https://patchstack.com/database/vulnerability/woocommerce-gateway-stripe/wordpress-woocommerce-stripe-gateway-plugin-7-6-0-cross-site-request-forgery-csrf-vulnerability?_s_id=cve vdb-entry