Medium · 6.5 CVE-2026-45217 EUVD-2026-31769GHSA-rpvx-ppgf-2678

WordPress Stripe Payment Gateway for WooCommerce plugin <= 5.0.7 - Broken Authentication vulnerability

Published May 25, 2026 · Updated May 26, 2026 · Assigned by Patchstack

Vendor: ThemeHigh Product: Stripe Payment Gateway for WooCommerce Category: Web / CMS

Description

Authentication Bypass Using an Alternate Path or Channel vulnerability in ThemeHigh Stripe Payment Gateway for WooCommerce allows Password Recovery Exploitation.

This issue affects Stripe Payment Gateway for WooCommerce: from n/a through 5.0.7.

Affected products

Vendor	Product	Affected	Fixed
ThemeHigh	Stripe Payment Gateway for WooCommerce	≤ 5.0.7	—

References

https://patchstack.com/database/wordpress/plugin/payment-gateway-stripe-and-woocommerce-integration/vulnerability/wordpress-stripe-payment-gateway-for-woocommerce-plugin-5-0-7-broken-authentication-vulnerability?_s_id=cve vdb-entry