High · 7.5 CVE-2023-51502 EUVD-2023-56215GHSA-3wxg-f3wj-3x8p

WordPress WooCommerce Stripe Payment Gateway Plugin <= 7.6.1 is vulnerable to Insecure Direct Object References (IDOR)

Published Jan 5, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: woocommerce Product: WooCommerce Stripe Payment Gateway Category: Web / CMS

Description

Authorization Bypass Through User-Controlled Key vulnerability in WooCommerce WooCommerce Stripe Payment Gateway.This issue affects WooCommerce Stripe Payment Gateway: from n/a through 7.6.1.

Affected products

Vendor	Product	Affected	Fixed
WooCommerce	WooCommerce Stripe Payment Gateway	≤ 7.6.1	—

References

https://patchstack.com/database/vulnerability/woocommerce-gateway-stripe/wordpress-woocommerce-stripe-gateway-plugin-7-6-1-unauthenticated-insecure-direct-object-references-idor-vulnerability?_s_id=cve vdb-entry