WooCommerce Stripe Payment Gateway vulnerabilities

Product

WooCommerce Stripe Payment Gateway

by woocommerce · last CVE Jun 16, 2026

CVEs

On KEV

9.8

Max CVSS

New 30D

Severity mix

Critical 1High 1Medium 1Low 0

Severity

Exploitation

Watch

Add WooCommerce Stripe Payment Gateway to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2023-35049	9.8	1%	Jun 19	WordPress WooCommerce Stripe Payment Gateway plugin <= 7.4.0 - Unauthenticated Broken Access Control vulnerability Affected: through 7.4.0
CVE-2023-44999	8.8	0%	Mar 27	WordPress WooCommerce Stripe Gateway plugin <= 7.6.0 - Cross Site Request Forgery (CSRF) vulnerability Affected: through 7.6.0
CVE-2026-2381	6.5	0%	Jun 16	WooCommerce Stripe Payment Gateway <= 10.7.0 - Missing Authorization to Unauthenticated Order Status Manipulation via 'order' Parameter Affected: through 10.7.0