Skip to content
Sign in
5.3 Medium

CVE-2023-4040 The Stripe Payment Plugin for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to…

Description

The Stripe Payment Plugin for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the eh_callback_handler function in versions up to, and including, 3.7.9. This makes it possible for unauthenticated attackers to modify the order status of arbitrary WooCommerce orders.

Affected products and versions

Product Affected versions Fixed in
Stripe Payment Plugin for WooCommerce 3.7.9 No fix stated

Other CVEs of Stripe Payment Plugin for WooCommerce

The 3 CVEs of Stripe Payment Plugin for WooCommerce →
CVE-2024-0705 The Stripe Payment Plugin for WooCommerce plugin for WordPress is vulnerable to SQL Injection via the 'id' parameter… 9.8 Critical CVE-2023-3162 The Stripe Payment Plugin for WooCommerce plugin for WordPress is vulnerable to authentication bypass in versions up to,… 9.8 Critical
Track this CVE