WordPress Accept Stripe Payments plugin <= 2.0.79 - Broken Access Control vulnerability

CVE-2023-48286

What is CVE-2023-48286?

A missing authorization vulnerability has been identified in the Stripe Payments plugin developed by Tips and Tricks HQ. This security flaw allows attackers to exploit incorrectly configured access controls, potentially enabling unauthorized access to sensitive functionalities within the plugin. This issue impacts versions of Stripe Payments from n/a to 2.0.79, emphasizing the need for users to review their configurations and apply necessary security measures to mitigate possible risks.

References