Are there public exploits for woocommerce WooCommerce Stripe Payment Gateway vulnerabilities?

Yes — 1 of woocommerce WooCommerce Stripe Payment Gateway's CVEs have a known public exploit.

Which versions of woocommerce WooCommerce Stripe Payment Gateway are affected?

10 distinct woocommerce WooCommerce Stripe Payment Gateway versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in woocommerce WooCommerce Stripe Payment Gateway CVEs?

woocommerce WooCommerce Stripe Payment Gateway's CVEs most often map to these CWE weakness types: CWE-639 (Authorization Bypass Through User-Controlled Key), CWE-862 (Missing Authorization), CWE-352 (Cross-Site Request Forgery (CSRF)).

How many critical woocommerce WooCommerce Stripe Payment Gateway vulnerabilities are there?

woocommerce WooCommerce Stripe Payment Gateway has 2 critical and 2 high-severity CVEs.

What is the average severity of woocommerce WooCommerce Stripe Payment Gateway CVEs?

The average CVSS base score across woocommerce WooCommerce Stripe Payment Gateway's scored CVEs is 8.5.

WooCommerce Stripe Payment Gateway Vulnerabilities: CVEs, CISA KEV & Security Advisories

Name: WooCommerce Stripe Payment Gateway vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

RadicalNotion.AI

WooCommerce Stripe Payment Gateway Vulnerabilities: CVEs, CISA KEV & Security Advisories

Overview

WooCommerce Stripe Payment Gateway has 5 published CVE records since 2023, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 1 have a known public exploit. The average CVSS base score across scored CVEs is 8.5.

Severity and exploitation

How the CVSS severity of WooCommerce Stripe Payment Gateway's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical2

High2

Medium1

Low0

In CISA’s Known Exploited Vulnerabilities catalog

None of WooCommerce Stripe Payment Gateway's CVEs are currently listed in CISA's KEV catalog.

Public exploits

One of WooCommerce Stripe Payment Gateway's CVEs has a known public exploit available.

Affected versions and CVEs

Browse every WooCommerce Stripe Payment Gateway version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

<= 7.4.02 CVEs
>= 7.4.12 CVEs
<= 10.7.01 CVE
<= 7.6.01 CVE
<= 7.6.11 CVE
>= 7.6.11 CVE
>= 7.6.21 CVE

Fixed in

7.4.12 CVEs
7.6.11 CVE
7.6.21 CVE

Find a version

5 CVEs

Sort

WooCommerce Stripe Payment Gateway <= 10.7.0 - Missing Authorization to Unauthenticated Order Status Manipulation via 'order' Parameter
CVE-2026-2381CWE-862
Medium · CVSS 6.5
EPSS 0.4% (32th pct)2026-06-16
WordPress WooCommerce Stripe Payment Gateway plugin <= 7.4.0 - Unauthenticated Broken Access Control vulnerability
CVE-2023-35049
Patch
CWE-862
Critical · CVSS 9.8
EPSS 0.6% (48th pct)2024-06-19
WordPress WooCommerce Stripe Gateway plugin <= 7.6.0 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2023-44999
Patch
CWE-352
High · CVSS 8.8
EPSS 0.2% (12th pct)2024-03-27
WordPress WooCommerce Stripe Payment Gateway Plugin <= 7.6.1 is vulnerable to Insecure Direct Object References (IDOR)
CVE-2023-51502
Patch
CWE-639
Critical · CVSS 9.8
EPSS 0.6% (48th pct)2024-01-05
WordPress WooCommerce Stripe Payment Gateway Plugin <= 7.4.0 is vulnerable to Insecure Direct Object References (IDOR)
CVE-2023-34000
Public exploit
Patch
CWE-639
High · CVSS 7.5
EPSS 1.2% (68th pct)2023-06-14

Common weakness types

The CWE weakness categories most often found in WooCommerce Stripe Payment Gateway CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many WooCommerce Stripe Payment Gateway CVEs were published each year.

2023

2024

2026

Other woocommerce products

Browse vulnerabilities for other products by woocommerce.

woocommerce20 CVEs AutomateWoo7 CVEs woocommerce_customers_manager5 CVEs woocommerce/woocommerce5 CVEs Product Vendors4 CVEs Shipping Multiple Addresses4 CVEs woocommerce pre-orders4 CVEs

Frequently asked questions

Common questions about WooCommerce Stripe Payment Gateway vulnerabilities.

How many CVEs does woocommerce WooCommerce Stripe Payment Gateway have?: woocommerce WooCommerce Stripe Payment Gateway has 5 published CVE records since 2023.
How many woocommerce WooCommerce Stripe Payment Gateway CVEs are in CISA KEV?: None of woocommerce WooCommerce Stripe Payment Gateway's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for woocommerce WooCommerce Stripe Payment Gateway vulnerabilities?: Yes — 1 of woocommerce WooCommerce Stripe Payment Gateway's CVEs have a known public exploit.
Which versions of woocommerce WooCommerce Stripe Payment Gateway are affected?: 10 distinct woocommerce WooCommerce Stripe Payment Gateway versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in woocommerce WooCommerce Stripe Payment Gateway CVEs?: woocommerce WooCommerce Stripe Payment Gateway's CVEs most often map to these CWE weakness types: CWE-639 (Authorization Bypass Through User-Controlled Key), CWE-862 (Missing Authorization), CWE-352 (Cross-Site Request Forgery (CSRF)).
How many critical woocommerce WooCommerce Stripe Payment Gateway vulnerabilities are there?: woocommerce WooCommerce Stripe Payment Gateway has 2 critical and 2 high-severity CVEs.
What is the average severity of woocommerce WooCommerce Stripe Payment Gateway CVEs?: The average CVSS base score across woocommerce WooCommerce Stripe Payment Gateway's scored CVEs is 8.5.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track WooCommerce Stripe Payment Gateway vulnerabilities

Get an alert for each new WooCommerce Stripe Payment Gateway CVE, with AI-written analysis and remediation steps.

Create an account See pricing