# WooCommerce Stripe Payment Gateway <= 11.1.1 - Unauthenticated Integer Overflow to Payment Amount Manipulation

- **ID:** WPSEC-2026-3003
- **Plugin:** WooCommerce Stripe Payment Gateway (`woocommerce-gateway-stripe`), https://wordpress.org/plugins/woocommerce-gateway-stripe/
- **Affected versions:** all versions before 11.1.2
- **Fixed in:** 11.1.2 (Update to 11.1.2 or later.)
- **Severity:** Low 3.7 (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N)
- **Weakness:** CWE-190
- **Usage among sites WPSec scans:** plugin High, affected versions High (as of 2026-11-12)
- **Attack surface analysis:** https://attacksurface.wpsec.com/plugin/woocommerce-gateway-stripe
- **Fix released:** 2026-11-11
- **Published:** 2026-11-12
- **URL:** https://wpsec.com/vuln/WPSEC-2026-3003/

## Description

The WooCommerce Stripe Payment Gateway plugin for WordPress is vulnerable to Integer Overflow via the get_stripe_amount() function in all versions up to, and including, 11.1.1, due to order totals being converted to Stripe minor units with absint() without rejecting values above Stripe's maximum or PHP's integer limit. This makes it possible for unauthenticated attackers to build a cart with an extremely large total, for example through a huge quantity of an item without stock limits, that wraps around to a much smaller charged amount. The order is then paid for far less than its total.

## References

- https://wpsec.com/vuln/WPSEC-2026-3003/
- https://plugins.svn.wordpress.org/woocommerce-gateway-stripe/tags/11.1.2/
- https://wordpress.org/plugins/woocommerce-gateway-stripe/

Source: WPSec, https://wpsec.com/vuln/WPSEC-2026-3003/

License: CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/). Free to use, share and adapt, also commercially, if you credit WPSec and link to this advisory.