Payment Gateway of Stripe for WooCommerce
Information
| Software Type | Plugin |
|---|---|
| Software Slug | payment-gateway-stripe-and-woocommerce-integration (view on wordpress.org) |
| Software Status | Active |
| Software Author | themehigh |
| Software Website | wordpress.org |
| Software Downloads | 578,577 |
| Software Active Installs | 7,000 |
| Software Record Last Updated | October 6, 2026 |
6 Vulnerabilities
Researcher:
pradeep suvarna
Researcher:
Jakub Herman
Researcher:
Francesco Carlucci
Researcher:
Francesco Carlucci
Researcher:
István Márton
CVE ID Unknown
Jun 7, 2021
Researchers:
| Title | Status | CVE ID | CVSS | Researchers | Date |
|---|---|---|---|---|---|
| Payment Gateway of Stripe for WooCommerce <= 5.0.8 - Unauthenticated Improper Verification of Cryptographic Signature via woocommerce_api_wt_stripe Webhook Endpoint | Patched | CVE-2026-9832 | pradeep suvarna | September 18, 2026 | |
| Payment Gateway of Stripe for WooCommerce <= 5.0.7 - Missing Authorization | Patched | CVE-2026-45217 | Jakub Herman | May 12, 2026 | |
| Stripe Payment Plugin for WooCommerce <= 3.7.9 - Unauthenticated SQL Injection | Patched | CVE-2024-0705 | Francesco Carlucci | January 18, 2024 | |
| Stripe Payment Plugin for WooCommerce <= 3.7.9 - Missing Authorization to Arbitrary Order Status Modification | Patched | CVE-2023-4040 | Francesco Carlucci | August 17, 2023 | |
| Stripe Payment Plugin for WooCommerce <= 3.7.7 - Authentication Bypass | Patched | CVE-2023-3162 | István Márton | August 1, 2023 | |
| Stripe Payment Plugin for WooCommerce <= 3.5.9 - Reflected Cross-Site Scripting | Patched | June 7, 2021 |
Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!
Learn moreWant to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.
The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.
Documentation