Advisories · Technology
Stripe Payment Forms by WP Full Pay.
Every CVE that names Stripe Payment Forms by WP Full Pay among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 4.3 Medium
Stripe Payment Forms by WP Full Pay < 8.5.5 - Cross-Customer Subscription Cancellation via IDOR
- Stripe Payment Forms by WP Full Pay
- Broken access control
- CVSS 4.3 Medium
Stripe Payment Forms by WP Full Pay < 8.5.1 - Cross-Customer Subscription Modification via IDOR
- Stripe Payment Forms by WP Full Pay
- Broken access control
- CVSS 5.3 Medium
Stripe Payment Forms by WP Full Pay < 8.5.1 - Unauthenticated Customer Portal Subscription and Billing Data Disclosure via Unconfirmed Session
- Stripe Payment Forms by WP Full Pay
- Information disclosure
- CVSS 7.5 High
Stripe Payment Forms by WP Full Pay < 8.5.2 - Unauthenticated Payment Intent Amount Manipulation
- Stripe Payment Forms by WP Full Pay
- Broken access control