Skip to content
Sign in
Not rated

CVE-2022-2194 The Accept Stripe Payments WordPress plugin before 2.0.64 does not sanitize and escape some of its settings, allowing…

Description

The Accept Stripe Payments WordPress plugin before 2.0.64 does not sanitize and escape some of its settings, allowing high privilege users such as admin to perform cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.

Affected products and versions

Product Affected versions Fixed in
Accept Stripe Payments 2.0 earliest → < 2.0.64 2.0.64

Other CVEs of Accept Stripe Payments

The 3 CVEs of Accept Stripe Payments →
CVE-2026-81424 The Accept Stripe Payments WordPress plugin before 2.1.4 does not verify that the product fulfilled when a checkout is… 5.3 Medium CVE-2026-81423 The Accept Stripe Payments WordPress plugin before 2.1.4 does not validate a user-supplied URL before using it in a… 4.3 Medium
Track this CVE