WordPress plugin
Payment Plugins for Stripe WooCommerce security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 4 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical0
- High0
- Medium4
- Low0
All Payment Plugins for Stripe WooCommerce vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium6.1 | Reflected DOM-Based Cross-Site Scripting via '#response' URL Fragment ≤4.0.17Update to 4.0.18 | CVE-2026-89100 | |
| Medium5.3 | Unauthenticated Information Exposure ≤4.0.11Update to 4.0.12 | CVE-2026-80339 | |
| Medium5.3 | Missing Authorization to Unauthenticated Arbitrary Order Status Modification via Empty Webhook Secret ≤4.0.7Update to 4.0.8 | CVE-2026-12654 | |
| Medium5.3 | Missing Authorization ≤4.0.7Update to 4.0.8 | CVE-2026-59530 |
- Medium6.1Reflected DOM-Based Cross-Site Scripting via '#response' URL Fragment
≤4.0.17Update to 4.0.18
- Medium5.3Unauthenticated Information Exposure
≤4.0.11Update to 4.0.12
- Medium5.3Missing Authorization to Unauthenticated Arbitrary Order Status Modification via Empty Webhook Secret
≤4.0.7Update to 4.0.8
- Medium5.3Missing Authorization
≤4.0.7Update to 4.0.8
Payment Plugins for Stripe WooCommerce: common questions
Does Payment Plugins for Stripe WooCommerce have known vulnerabilities?
Yes. VulnCrest Radar lists 4 known vulnerabilities in Payment Plugins for Stripe WooCommerce: 4 medium. None are known to affect version null.
How do I check which version of Payment Plugins for Stripe WooCommerce I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Payment Plugins for Stripe WooCommerce vulnerability?
CVE-2026-89100, published Oct 9, 2026: Payment Plugins for Stripe WooCommerce <= 4.0.17 - Reflected DOM-Based Cross-Site Scripting via '#response' URL Fragment. Severity: Medium (CVSS 6.1).
Is any Payment Plugins for Stripe WooCommerce vulnerability listed in CISA KEV?
No. None of the known Payment Plugins for Stripe WooCommerce vulnerabilities is currently listed in the CISA KEV catalog.