WordPress Plugin Vulnerabilities

Accept Stripe Payments < 2.0.80 - Insecure Direct Object Reference

Description

The Stripe Payments plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the handle_create_pi() function in versions up to, and including, 2.0.79. This makes it possible for unauthenticated attackers to purchase products in another currency which may result in attackers paying lower amouns than they should be.

Affects Plugins

Plugin icon
stripe-payments
Fixed in 2.0.80

References

CVE
CVE-2023-48286
URL
https://www.wordfence.com/threat-intel/vulnerabilities/id/44d14692-d90a-45f9-afb4-0666ce4b3397

Classification

Type
IDOR
OWASP top 10
A5: Broken Access Control
CWE
CWE-639
CVSS
5.3 (medium)

Miscellaneous

Original Researcher
Joshua Chan
Verified
No
WPVDB ID
c69af866-1a6e-45b4-9176-afd61f27b862

Timeline

Publicly Published
2023-11-23 (about 2 years ago)
Added
2023-11-28 (about 2 years ago)
Last Updated
2024-01-22 (about 2 years ago)

Other

Published
Title
Published
2026-05-04
Title
GenerateBlocks < 2.2.1 - Insecure Direct Object Reference to Authenticated (Contributor+) Sensitive Information Exposure via Dynamic Tag Replacements
Published
2024-04-05
Title
Profile Builder < 3.11.3 - Restricted Email Bypass
Published
2024-08-16
Title
Propovoice CRM <= 1.7.8 - Unauthenticated Insecure Direct Object Reference
Published
2026-01-09
Title
WooCommerce Square < 5.1.2 - Unauthenticated Insecure Direct Object Reference to Sensitive Information Exposure in get_token_by_id
Published
2025-05-05
Title
Reales WP STPT <= 2.1.2 - Authenticated (Subscriber+) Privilege Escalation via Password Update