9.8
CVE-2023-3162
- EPSS 0.27%
- Veröffentlicht 31.08.2023 06:15:09
- Zuletzt bearbeitet 21.11.2024 08:16:35
- Quelle security@wordfence.com
- CVE-Watchlists
- Unerledigt
LoginStripe Payment Plugin for WooCommerce <= 3.7.7 - Authentication Bypass
The Stripe Payment Plugin for WooCommerce plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 3.7.7. This is due to insufficient verification on the user being supplied during a Stripe checkout through the plugin. This allows unauthenticated attackers to log in as users who have orders, who are typically customers.
Mögliche Gegenmaßnahme
Payment Gateway for Stripe and for WooCommerce: Update to version 3.7.8, or a newer patched version
Weitere Schwachstelleninformationen
SystemWordPress Plugin
≫
Produkt
Payment Gateway for Stripe and for WooCommerce
Version
* - 3.7.7
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Webtoffee ≫ Stripe Payment Plugin For Woocommerce SwPlatformwordpress Version <= 3.7.7
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.27% | 0.503 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| security@wordfence.com | 9.8 | 3.9 | 5.9 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
|