Commerce Stripe

3 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2026-118558 Oct 30, 03:09 PHP PATCH This Week

Cross-Site Request Forgery (CSRF) vulnerability in Drupal Commerce Stripe allows Cross Site Request Forgery. This issue affects Commerce Stripe versions: from 2.0.0 to 2.2.3.

CSRF Drupal Stripe Commerce Stripe

NVD

EPSS

0.1%

CVE-2026-118559 Oct 30, 03:09 PHP PATCH Monitor

Improper Verification of Cryptographic Signature vulnerability in Drupal Commerce Stripe allows Signature Spoof. This issue affects Commerce Stripe versions: from 0.0.0 to 1.4, from 2.0.0 to 2.2.3.

PHP Authentication Bypass Drupal Commerce Stripe

NVD

EPSS

0.1%

CVE-2026-118560 Oct 30, 03:09 PHP PATCH This Week

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Commerce Stripe allows Cross-Site Scripting (XSS). This issue affects Commerce Stripe versions: from 2.0.0 to 2.2.3.

PHP XSS Drupal Commerce Stripe

NVD

EPSS

0.2%

CVE-2026-118558 PHP

EPSS 0%

PATCH This Week

Cross-Site Request Forgery (CSRF) vulnerability in Drupal Commerce Stripe allows Cross Site Request Forgery. This issue affects Commerce Stripe versions: from 2.0.0 to 2.2.3.

CSRF Drupal Stripe +1

NVD

CVE-2026-118559 PHP

EPSS 0%

PATCH Monitor

Improper Verification of Cryptographic Signature vulnerability in Drupal Commerce Stripe allows Signature Spoof. This issue affects Commerce Stripe versions: from 0.0.0 to 1.4, from 2.0.0 to 2.2.3.

PHP Authentication Bypass Drupal +1

NVD

CVE-2026-118560 PHP

EPSS 0%

PATCH This Week

PHP XSS Drupal +1

NVD