High · 7.5 CVE-2026-59530 EUVD-2026-49206GHSA-xv2h-xgwc-x35f

WordPress Stripe For WooCommerce plugin <= 4.0.7 - Broken Access Control vulnerability

Published Jul 27, 2026 · Updated Jul 27, 2026 · Assigned by Patchstack

Vendor: Payment Plugins Product: Stripe For WooCommerce Category: Web / CMS

Description

Unauthenticated Broken Access Control in Stripe For WooCommerce <= 4.0.7 versions.

Affected products

Vendor	Product	Affected	Fixed
Payment Plugins	Stripe For WooCommerce	≤ 4.0.7	—

References

https://patchstack.com/database/wordpress/plugin/woo-stripe-payment/vulnerability/wordpress-stripe-for-woocommerce-plugin-4-0-7-broken-access-control-vulnerability?_s_id=cve vdb-entry