CVE Database /
CVE-2021-39347
CVE · Medium
CVE-2021-39347 — Payment Plugins for Stripe WooCommerce [woo-stripe-payment] >= 3.0.0 - <= 3.3.9
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2021-39347
|
Payment Plugins for Stripe WooCommerce [woo-stripe-payment] >= 3.0.0 - <= 3.3.9 |
Missing Authorization |
Medium
4.3
|
3.0.0–3.3.10
|
3.3.10 |
2021-10-01 |
—
|
CVE-2021-39347
The Stripe for WooCommerce plugin through version 3.3.9 contains an insufficient capability check in its user account configuration functionality, allowing unauthenticated attackers to modify their account settings to use another user's Stripe identifier. This vulnerability enables attackers to make purchases using victim payment accounts without proper authorization. The flaw impacts all versions from 3.0.0 through 3.3.9.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings