CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
What the vulnerability does
Authorization Bypass Through User-Controlled Key vulnerability in Checkout Plugins Stripe Payments For WooCommerce by Checkout.This issue affects Stripe Payments For WooCommerce by Checkout: from n/a through 1.9.1.
Explanation of Vulnerability in Simple Terms
The Stripe Payments For WooCommerce plugin contains an authorization flaw that exposes sensitive payment data. An unauthenticated attacker can read confidential information without requiring user interaction or special network conditions. The vulnerability affects versions up to 1.9.1. Site administrators should update immediately to a patched version.
What an attacker can do
Read sensitive payment and customer data without authentication.
Potential impact on your site
Customer payment information and transaction details may be exposed to unauthorized parties.
Conditions required to exploit
Network access only; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
