Stripe Payments For WooCommerce by Checkout Plugins

Stripe Payments For WooCommerce by Checkout Plugins has 3 disclosed vulnerabilities in the WordSec catalog, reported between 2023 and 2024; all 3 are fixed as of September 2026. Their average CVSS score is 5.0, and the most serious one scores 5.4 out of 10. 2024 was the busiest year with 2 disclosures.

The most common weakness is Cross-Site Request Forgery (CSRF), behind 2 of the records (67%). Other recurring categories include Authorization Bypass Through User-Controlled Key.

Every one of the 3 issues recorded for Stripe Payments For WooCommerce by Checkout Plugins has a vendor fix available, so running the current release closes all known holes.

2 independent researchers contributed these findings, most of them (2) reported by Rafie Muhammad.

Strategic Overview

Avg CVSSMedium

5.0/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Stripe Payments For WooCommerce by Checkout Plugins vulnerabilities before they are exploited.

Highest severity on recordCVSS 5.4CVE-2023-23865

Stripe Payments For WooCommerce by Checkout Plugins <= 1.4.10 - Cross-Site Request Forgery

Read the full analysis

Vulnerability Records

3 records


2024-08-16 00:00	Stripe Payments For WooCommerce by Checkout <= 1.9.1 - Unauthenticated Insecure Direct Object Reference Stripe Payments For WooCommerce… <= 1.9.1	`CVE-2024-43315`	5.3 Medium	Rafie Muhammad	Yes
2024-08-16 00:00	Stripe Payments For WooCommerce by Checkout <= 1.9.1 - Cross-Site Request Forgery Stripe Payments For WooCommerce… <= 1.9.1	`CVE-2024-43316`	4.3 Medium	Rafie Muhammad	Yes
2023-01-23 00:00	Stripe Payments For WooCommerce by Checkout Plugins <= 1.4.10 - Cross-Site Request Forgery Stripe Payments For WooCommerce… <= 1.4.10	`CVE-2023-23865`	5.4 Medium	István Márton	Yes

Showing 1–3 of 3 reports