CVE-2023-3162
CVSS 3.1 Score 7.5 of 10 (high)
Details
Published Aug 31, 2023
Updated: Nov 7, 2023
CWE ID 89
Summary
CVE-2023-3162: A vulnerability affects the Stripe Payment Plugin for WooCommerce on WordPress. In versions up to 3.7.7, authentication bypass occurs due to insufficient user verification during Stripe checkout. This flaw enables unauthenticated attackers to log in as customers with orders, posing a significant security risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Share