Lucene search

K
cvePatchstackCVE-2023-52143
HistoryJan 05, 2024 - 11:15 a.m.

CVE-2023-52143

2024-01-0511:15:10
CWE-532
Patchstack
web.nvd.nist.gov
16
cve-2023-52143
exposure
sensitive information
unauthorized actor
naa986
wp stripe checkout
vulnerability
nvd

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

7.6

Confidence

High

EPSS

0.001

Percentile

37.2%

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Naa986 WP Stripe Checkout.This issue affects WP Stripe Checkout: from n/a through 1.2.2.37.

Affected configurations

Nvd
Vulners
Vulnrichment
Node
noorspluginwp_stripe_checkoutRange≀1.2.2.37wordpress
VendorProductVersionCPE
noorspluginwp_stripe_checkout*cpe:2.3:a:noorsplugin:wp_stripe_checkout:*:*:*:*:*:wordpress:*:*

CNA Affected

[
  {
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "wp-stripe-checkout",
    "product": "WP Stripe Checkout",
    "vendor": "Naa986",
    "versions": [
      {
        "changes": [
          {
            "at": "1.2.2.38",
            "status": "unaffected"
          }
        ],
        "lessThanOrEqual": "1.2.2.37",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  }
]

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

7.6

Confidence

High

EPSS

0.001

Percentile

37.2%