WordPress WooCommerce Stripe Payment Gateway Plugin <= 7.6.1 is vulnerable to Insecure Direct Object References (IDOR)

CVE-2023-51502

What is CVE-2023-51502?

An authorization bypass vulnerability exists in the WooCommerce Stripe Payment Gateway, allowing attackers to exploit user-controlled keys. This flaw can lead to unauthorized access to sensitive information, posing significant risks to e-commerce operations. Affected versions include those prior to 7.6.1, highlighting the need for users to update their plugins to mitigate potential threats. Additional resources on this vulnerability can be found in the provided references.

References