Vulnerabilities / WooCommerce Stripe Payment Gateway
WooCommerce Stripe Payment Gateway vulnerabilities
Advisories WPSec published for WooCommerce Stripe Payment Gateway. Other sources may list more. Its attack surface: WooCommerce Stripe Payment Gateway on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-11-12 | WPSEC-2026-2966 | WooCommerce Stripe Payment Gateway < 11.2.0 - Unauthenticated Insecure Direct Object Reference via Setup Intent | Low 3.7 | 11.2.0 |
| 2026-11-12 | WPSEC-2026-2965 | WooCommerce Stripe Payment Gateway < 11.2.0 - Unauthenticated Sensitive Information Exposure via Pay for Order Page | Low 3.7 | 11.2.0 |
License: CC BY 4.0