Advisories · Technology
paymentplugins Payment Plugins for Stripe WooCommerce.
Every CVE that names paymentplugins Payment Plugins for Stripe WooCommerce among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.1 Medium
Payment Plugins for Stripe WooCommerce <= 4.0.17 - Reflected DOM-Based Cross-Site Scripting via '#response' URL Fragment
- paymentplugins Payment Plugins for Stripe WooCommerce
- Cross-site scripting (XSS)
- CVSS 5.3 Medium
Payment Plugins for Stripe WooCommerce <= 4.0.7 - Missing Authorization to Unauthenticated Arbitrary Order Status Modification via Empty Webhook Secret
- paymentplugins Payment Plugins for Stripe WooCommerce
- Broken access control