Payment Plugins for Stripe WooCommerce

Payment Plugins for Stripe WooCommerce has 2 disclosed vulnerabilities in the WordSec catalog, all reported in 2026; all 2 are fixed as of September 2026. Their average CVSS score is 5.3, and the most serious one scores 5.3 out of 10. 2026 was the busiest year with 2 disclosures.

The most common weakness is Missing Authorization, behind 2 of the records (100%).

Every one of the 2 issues recorded for Payment Plugins for Stripe WooCommerce has a vendor fix available, so running the current release closes all known holes.

2 independent researchers contributed these findings, one record each. Payment Plugins for Stripe WooCommerce is installed on roughly 100,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.

Strategic Overview

Avg CVSSMedium

5.3/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Payment Plugins for Stripe WooCommerce vulnerabilities before they are exploited.

Highest severity on recordCVSS 5.3CVE-2026-12654

Payment Plugins for Stripe WooCommerce <= 4.0.7 - Missing Authorization to Unauthenticated Arbitrary Order Status Modification via Empty Webhook Secret

Read the full analysis

Vulnerability Records

2 records


2026-07-23 18:32	Payment Plugins for Stripe WooCommerce <= 4.0.7 - Missing Authorization to Unauthenticated Arbitrary Order Status Modification via Empty Webhook Secret Payment Plugins for Stripe WooCommerce <= 4.0.7	`CVE-2026-12654`	5.3 Medium	gidget smith	Yes
2026-07-23 00:00	Payment Plugins for Stripe WooCommerce <= 4.0.7 - Missing Authorization Payment Plugins for Stripe WooCommerce <= 4.0.7	`CVE-2026-59530`	5.3 Medium	timomangcut	Yes

Showing 1–2 of 2 reports

Latestv4.0.13

Payment Plugins for Stripe WooCommerce

Author

Payment Plugins

4.8(301)

96/100

Last Updated

2026-09-04 (6d ago)

Active Installs

100,000+

Downloads

6,281,030

Requires WP

4.7+

Requires PHP

7.4+

Tested up to

WP 7.1

Created

2019-08-23 (7y ago)

Requires Plugins

woocommerce

Accept Credit Cards, Google Pay, ApplePay, Afterpay, Affirm, ACH, Klarna, iDEAL and more all in one plugin for free! Official Stripe Partner Payment Plugins is an official partner of Stripe. Boost conversion by offering product and cart page checkout Stripe for WooCommerce is made to supercharge your conversion rate by decreasing payment friction for your customer. Offer Google Pay, Apple Pay, and Stripe’s Browser payment methods on product pages, cart pages, and at the top of your checkout page. Visit our demo site to see all the payment methods in action Demo Site To see Apple Pay, visit the site using an iOS device. Google Pay will display for supported browsers like Chrome. Features Credit Cards Google Pay Apple Pay Afterpay, Affirm, Klarna ACH Payments 3DS 2.0 Local payment methods like Konbini, PayNow, BLIK, P24, IDEAL and many more WooCommerce Subscriptions WooCommerce Pre-Orders WooCommerce Blocks Installments for supported countries Integrates with CheckoutWC

View on WordPress.org