CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
What the vulnerability does
Authentication Bypass Using an Alternate Path or Channel vulnerability in ThemeHigh Stripe Payment Gateway for WooCommerce allows Password Recovery Exploitation. This issue affects Stripe Payment Gateway for WooCommerce: from n/a through 5.0.7.
Explanation of Vulnerability in Simple Terms
The Stripe Payment Gateway for WooCommerce plugin through version 5.0.7 contains an authentication weakness that allows unauthenticated attackers to modify payment data or disrupt transactions. The vulnerability requires only network access and no user interaction. Site owners should update immediately to prevent unauthorized payment manipulation.
What an attacker can do
Modify payment transaction data or disrupt payment processing without authentication.
Potential impact on your site
Attackers can tamper with Stripe payments or cause transaction failures on your WooCommerce store.
Conditions required to exploit
Network access only; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
