Vulnerabilities / WooCommerce Stripe Payment Gateway / WPSEC-2026-3003
WooCommerce Stripe Payment Gateway <= 11.1.1 - Unauthenticated Integer Overflow to Payment Amount Manipulation
Low 3.7
CWE-190Fixed in 11.1.2
- ID
- WPSEC-2026-3003
- Plugin
- WooCommerce Stripe Payment Gateway (woocommerce-gateway-stripe)
- Affected
- all versions before 11.1.2
- Remediation
- Update to 11.1.2 or later.
- CVSS 3.1
- CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
- Weakness
- CWE-190
- Usage
- Plugin High · Affected versions High among sites WPSec scans, 2026-11-12
- Attack surface
- WooCommerce Stripe Payment Gateway on WPSec AttackSurface
- Fix released
- Published
Description
The WooCommerce Stripe Payment Gateway plugin for WordPress is vulnerable to Integer Overflow via the get_stripe_amount() function in all versions up to, and including, 11.1.1, due to order totals being converted to Stripe minor units with absint() without rejecting values above Stripe's maximum or PHP's integer limit. This makes it possible for unauthenticated attackers to build a cart with an extremely large total, for example through a huge quantity of an item without stock limits, that wraps around to a much smaller charged amount. The order is then paid for far less than its total.
References
- https://wpsec.com/vuln/WPSEC-2026-3003/
- https://plugins.svn.wordpress.org/woocommerce-gateway-stripe/tags/11.1.2/
- https://wordpress.org/plugins/woocommerce-gateway-stripe/
Published by WPSec. Provided as is, without warranty. Corrections: contact us.
This advisory as JSON or Markdown · All advisories: JSON, RSS