CVE · High

CVE-2023-35049 — WooCommerce Stripe Payment Gateway [woocommerce-gateway-stripe] < 7.4.1

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2023-35049 WooCommerce Stripe Payment Gateway [woocommerce-gateway-stripe] < 7.4.1 Missing Authorization High 7.5 < 7.4.1 7.4.1 2023-06-13

CVE-2023-35049

The WooCommerce Stripe Payment Gateway plugin before version 7.4.1 contains a broken access control vulnerability that was discovered and reported by Rafie Muhammad. This flaw allows unauthorized access to protected functionality within the plugin. Site administrators should upgrade to version 7.4.1 or later to remediate this issue.

Based on public CVE data (MITRE/NVD).

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.