Plugin icon

Accept Stripe Payments

stripe-payments

Vulnerabilities:

8

Last Updated:

September 2, 2026

Active Installs:

20000

Published
Title
Fixed in
CVSS
Published
2026-09-03
Title
Accept Stripe Payments < 2.1.4 - Open Redirect via IPN Handler
Fixed in
Fixed in 2.1.4
CVSS
4.3 (medium)
Published
2026-09-03
Title
Accept Stripe Payments < 2.1.4 - Unauthenticated Product Substitution via IDOR
Fixed in
Fixed in 2.1.4
CVSS
5.3 (medium)
Published
2026-08-24
Title
Accept Stripe Payments < 2.1.3 - Unauthenticated Stored Cross-Site Scripting
Fixed in
Fixed in 2.1.3
CVSS
7.2 (high)
Published
2026-05-29
Title
Accept Stripe Payments < 2.0.99 - Unauthenticated Payment Bypass
Fixed in
Fixed in 2.0.99
CVSS
5.3 (medium)
Published
2024-08-06
Title
Accept Stripe Payments < 2.0.87 - Authenticated (Contributor+) Stored Cross-Site Scripting via accept_stripe_payment_ng Shortcode
Fixed in
Fixed in 2.0.87
CVSS
5.4 (medium)
Published
2023-11-23
Title
Accept Stripe Payments < 2.0.80 - Insecure Direct Object Reference
Fixed in
Fixed in 2.0.80
CVSS
5.3 (medium)
Published
2022-06-27
Title
Accept Stripe Payments < 2.0.64 - Admin+ Stored Cross-Site Scripting
Fixed in
Fixed in 2.0.64
CVSS
3.4 (low)
Published
2021-01-05
Title
Stripe Payments < 2.0.40 - Authenticated Stored Cross-Site Scripting (XSS)
Fixed in
Fixed in 2.0.40
CVSS
4.4 (medium)