Stripe For Woocommerce

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2026-59530 Jul 27, 13:59 HIGH This Week

Unauthenticated broken access control in Stripe For WooCommerce plugin version 4.0.7 and below allows remote attackers to modify plugin data without any authentication. The vulnerability

WordPress Authentication Bypass Wordpress Plugin Stripe For Woocommerce

NVD

CVSS 3.1

7.5

EPSS

0.2%

CVE-2021-39347 Oct 04, 18:15 MEDIUM PATCH This Month

The Stripe for WooCommerce WordPress plugin is missing a capability check on the save() function found in the ~/includes/admin/class-wc-stripe-admin-user-edit.php file that makes it possible for. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. This Missing Authorization vulnerability could allow attackers to access resources or perform actions without proper authorization checks.

PHP WordPress Authentication Bypass Wordpress Plugin Stripe For Woocommerce

NVD

CVSS 3.1

4.3

EPSS

0.6%

CVE-2026-59530

EPSS 0% CVSS 7.5

HIGH This Week

Unauthenticated broken access control in Stripe For WooCommerce plugin version 4.0.7 and below allows remote attackers to modify plugin data without any authentication. The vulnerability

WordPress Authentication Bypass Wordpress Plugin +1

NVD

CVE-2021-39347

EPSS 1% CVSS 4.3

MEDIUM PATCH This Month

PHP WordPress Authentication Bypass +2

NVD