CVE-2023-34000: WordPress WooCommerce Stripe Payment Gateway Plugin <= 7.4.0 is vulnerable to Insecure Direct Object References (IDOR)
Unauth. IDOR vulnerability leading to PII Disclosure in WooCommerce Stripe Payment Gateway plugin <= 7.4.0 versions.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
WordPress WooCommerce Stripe Payment Gateway Pluginto a version that resolves this vulnerability.Fixed in 7.4.1
Event History
Frequently Asked Questions
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2023-34000.
What is the severity level of CVE-2023-34000?
The severity level of CVE-2023-34000 is high with a score of 7.5.
What is the affected software in this vulnerability?
The affected software in this vulnerability is WooCommerce Stripe Payment Gateway plugin version <= 7.4.0.
What is the CWE ID for this vulnerability?
The CWE ID for this vulnerability is CWE-639.
Where can I find more information about this vulnerability?
You can find more information about this vulnerability at the following references: [Reference 1](https://patchstack.com/articles/unauthenticated-idor-to-pii-disclosure-vulnerability-in-woocommerce-stripe-gateway-plugin?_s_id=cve), [Reference 2](https://patchstack.com/database/vulnerability/woocommerce-gateway-stripe/wordpress-woocommerce-stripe-payment-gateway-plugin-7-4-0-insecure-direct-object-references-idor-vulnerability?_s_id=cve).