Accept Stripe Payments
Approved changes feed: RSS · Atom
cpe:2.3:a:unknown:accept_stripe_payments:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Unknown (668ca391-a6cc-5e33-879b-83885214de33) |
|---|---|
| Product | Accept Stripe Payments (aa35c28d-b27a-5b67-b4d5-f26d0f53edb7) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-81423 |
vulnerable | 2026-09-16 04:32:48.475666 |
Accept Stripe Payments < 2.1.4 - Open Redirect via IPN Handler
The Accept Stripe Payments WordPress plugin before 2.1.4 does not validate a user-supplied URL before using it in a redirect, allowing unauthenticated attackers to redirect visitors to an arbitrary external website, which can be leveraged for phishing.
Published: 2026-09-05T06:00:06.462Z
Updated: 2026-09-06T10:39:51.115Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-81424 |
vulnerable | 2026-09-16 04:32:48.078162 |
Accept Stripe Payments < 2.1.4 - Unauthenticated Product Substitution via IDOR
The Accept Stripe Payments WordPress plugin before 2.1.4 does not verify that the product fulfilled when a checkout is completed matches the product the authoritative payment was actually made for, checking only that the amount paid is at least the referenced product's price, allowing unauthenticated attackers who complete a genuine payment to obtain fulfilment for a different, equal- or lower-priced product than the one they paid for.
Published: 2026-09-05T06:00:06.632Z
Updated: 2026-09-06T10:39:36.767Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-2194 |
vulnerable | 2026-06-08 05:42:50.423670 |
Accept Stripe Payments < 2.0.64 - Admin+ Stored Cross-Site Scripting
The Accept Stripe Payments WordPress plugin before 2.0.64 does not sanitize and escape some of its settings, allowing high privilege users such as admin to perform cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.
Published: 2022-07-17T10:37:22.000Z
Updated: 2024-08-03T00:32:08.626Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.