Live Vulnerability Intelligence
Threat Database
Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.
Threat Entry
Updated 2026-09-21
Payment Gateway Stripe And Woocommerce Integration - Security Vulnerability (CVE-2026-9832)
The Payment Gateway of Stripe for WooCommerce plugin for WordPress is vulnerable to Improper Verification of Cryptographic Signature in all versions up to, and including, 5.0.8. This is due to the publicly accessible `woocommerce_api_wt_stripe` webhook endpoint (`EH_Stripe_Webhook_Handler::handle()`) wrapping the only call to `\Stripe\Webhook::constructEvent()` inside an `if (!empty($endpoint_secret))` guard that is never entered on default installations — because the `eh_stripe_webhook_secret` option is empty after a fresh plugin install — causing the raw, attacker-controlled POST body to be decoded and processed as a fully trusted Stripe event without any signature verification, authentication,…
PLUGIN
Payment Gateway Stripe And Woocommerce Integration
CVE-2026-9832
Risk Score
Threat Entry
Updated 2026-07-24
Payment Gateway Stripe And Woocommerce Integration - Authentication Bypass (CVE-2026-45217)
Authentication Bypass Using an Alternate Path or Channel vulnerability in ThemeHigh Stripe Payment Gateway for WooCommerce allows Password Recovery Exploitation. This issue affects Stripe Payment Gateway for WooCommerce: from n/a through 5.0.7.
PLUGIN
Payment Gateway Stripe And Woocommerce Integration
CVE-2026-45217
Risk Score
Threat Entry
Updated 2026-06-17
Payment Gateway Stripe And Woocommerce Integration - Authentication Bypass (CVE-2023-3162)
The Stripe Payment Plugin for WooCommerce plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 3.7.7. This is due to insufficient verification on the user being supplied during a Stripe checkout through the plugin. This allows unauthenticated attackers to log in as users who have orders, who are typically customers.
PLUGIN
Payment Gateway Stripe And Woocommerce Integration
CVE-2023-3162
Risk Score