WordPress plugin
Accept Stripe Payments security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 9 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical0
- High1
- Medium8
- Low0
All Accept Stripe Payments vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium5.3 | Unauthenticated Insecure Direct Object Reference <2.1.4Update to 2.1.4 | CVE-2026-81424 | |
| Medium6.1 | Unauthenticated Open Redirect <2.1.4Update to 2.1.4 | CVE-2026-81423 | |
| High7.2 | Unauthenticated Stored Cross-Site Scripting ≤2.1.2Update to 2.1.3 | CVE-2026-78282 | |
| Medium5.3 | Unauthenticated Payment Bypass ≤2.0.98Update to 2.0.99 | CVE-2026-42752 | |
| Medium5.4 | Authenticated (Contributor+) Stored Cross-Site Scripting via accept_stripe_payment_ng Shortcode ≤2.0.86Update to 2.0.87 | CVE-2024-7353 | |
| Medium5.3 | Unauthenticated Content Injection ≤2.0.79Update to 2.0.80 | CVE-2023-48285 | |
| Medium5.3 | Insecure Direct Object Reference ≤2.0.79Update to 2.0.80 | CVE-2023-48286 | |
| Medium5.5 | Authenticated Stored Cross-Site Scripting ≤2.0.63Update to 2.0.64 | CVE-2022-2194 | |
| Medium6.4 | Authenticated Stored Cross-Site Scripting <2.0.40Update to 2.0.40 | — |
- Medium5.3Unauthenticated Insecure Direct Object Reference
<2.1.4Update to 2.1.4
- Medium6.1Unauthenticated Open Redirect
<2.1.4Update to 2.1.4
- High7.2Unauthenticated Stored Cross-Site Scripting
≤2.1.2Update to 2.1.3
- Medium5.3Unauthenticated Payment Bypass
≤2.0.98Update to 2.0.99
- Medium5.4Authenticated (Contributor+) Stored Cross-Site Scripting via accept_stripe_payment_ng Shortcode
≤2.0.86Update to 2.0.87
- Medium5.3Unauthenticated Content Injection
≤2.0.79Update to 2.0.80
- Medium5.3Insecure Direct Object Reference
≤2.0.79Update to 2.0.80
- Medium5.5Authenticated Stored Cross-Site Scripting
≤2.0.63Update to 2.0.64
- Medium6.4Authenticated Stored Cross-Site Scripting
<2.0.40Update to 2.0.40
Accept Stripe Payments: common questions
Does Accept Stripe Payments have known vulnerabilities?
Yes. VulnCrest Radar lists 9 known vulnerabilities in Accept Stripe Payments: 1 high, 8 medium. None are known to affect version null.
How do I check which version of Accept Stripe Payments I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Accept Stripe Payments vulnerability?
CVE-2026-81424, published Sep 5, 2026: Accept Stripe Payments < 2.1.4 - Unauthenticated Insecure Direct Object Reference. Severity: Medium (CVSS 5.3).
Is any Accept Stripe Payments vulnerability listed in CISA KEV?
No. None of the known Accept Stripe Payments vulnerabilities is currently listed in the CISA KEV catalog.