What’s Vulnerable › Products

WooCommerce Stripe Payment Gateway vulnerabilities

4 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your WooCommerce Stripe Payment Gateway version is affected

Latest WooCommerce Stripe Payment Gateway vulnerabilities

• CVE-2026-2381 — WooCommerce Stripe Payment Gateway <= 10.7.0 - Missing Authorization to Unauthenticated Order Status Manipulation via 'order' Parameter (CVSS 6.5)
• CVE-2023-35049 — WordPress WooCommerce Stripe Payment Gateway plugin <= 7.4.0 - Unauthenticated Broken Access Control vulnerability (CVSS 9.8)
• CVE-2023-44999 — WordPress WooCommerce Stripe Gateway plugin <= 7.6.0 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 8.8)
• CVE-2023-34000 — WordPress WooCommerce Stripe Payment Gateway Plugin <= 7.4.0 is vulnerable to Insecure Direct Object References (IDOR) (CVSS 7.5)