WordPress security by component

Stripe Payment Plugin for WooCommerce

Plugin description

Stripe Payment Plugin for WooCommerce is a WordPress component with 2 published CVE records in this archive. The latest tracked vulnerability was published Jan 19, 2024; the highest CVE/CNA score is 9.8.

Plugin slug: stripe-payment-plugin-for-woocommerce

Latest vulnerability

CVE-2024-0705: Stripe Payment Plugin for WooCommerce: SQL injection

Stripe Payment Plugin for WooCommerce is affected by SQL injection. The vulnerable path is reachable without authentication. A successful request can alter database queries and expose or modify WordPress data.

PublishedJan 19, 2024

Safe version guidanceSee mitigation notes

		Safe version
Jan 19, 2024	CVE-2024-0705 Stripe Payment Plugin for WooCommerce: SQL injection Stripe Payment Plugin for WooCommerce is affected by SQL injection. The vulnerable path is reachable without authentication. A successful request can alter database queries and expose or modify WordPress data.	See mitigation notes	CVE9.8 NVD7.5
Aug 18, 2023	CVE-2023-4040 Stripe Payment Plugin for WooCommerce: A security weakness Stripe Payment Plugin for WooCommerce is affected by a security weakness. The vulnerable path is reachable without authentication. The resulting impact depends on how the affected component exposes the vulnerable operation.	See mitigation notes	CVE5.3 NVDPending