Lucene search
WpvulndbWPVDB-ID:E987660E-C872-4C87-B45B-46A273ADFF16HistoryAug 18, 2023 - 12:00 a.m.
Stripe Payment < 3.8.0 - Unauthenticated WC Order Status Update
2023-08-1800:00:00
wpscan.com
3
stripe payment
unauthenticated users
woocommerce orders
authorisation
security vulnerability
Description The plugin does not have authorisation in its eh_callback_handler function, allowing unauthenticated users to update the status of arbitrary WooCommerce orders
| CPE | Name | Operator | Version |
|---|---|---|---|
| eq | 3.8.0 |
Related
cve
cve
CVE-2023-4040
2023-08-18 07:15:09
cvelist
cvelist
CVE-2023-4040
2023-08-18 06:46:50
nvd
nvd
CVE-2023-4040
2023-08-18 07:15:09
prion
prion
Design/Logic Flaw
2023-08-18 07:15:00
wordfence
wordfence
6.6 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
20.5%
Related for WPVDB-ID:E987660E-C872-4C87-B45B-46A273ADFF16