WordPress Accept Stripe Payments plugin <= 2.0.79 - Broken Access Control vulnerability
CVE-2023-48286

8.2HIGH

Key Information:

Vendor
WordPress
Status
Stripe Payments
Vendor
CVE Published:
9 December 2024

Summary

A missing authorization vulnerability has been identified in the Stripe Payments plugin developed by Tips and Tricks HQ. This security flaw allows attackers to exploit incorrectly configured access controls, potentially enabling unauthorized access to sensitive functionalities within the plugin. This issue impacts versions of Stripe Payments from n/a to 2.0.79, emphasizing the need for users to review their configurations and apply necessary security measures to mitigate possible risks.

Affected Version(s)

Stripe Payments <= 2.0.79

References

https://patchstack.com/database/wordpress/plugin/stripe-p...
vdb-entry

CVSS V3.1

Score:
8.2
Severity:
HIGH
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Joshua Chan (Patchstack Alliance)
.