← All advisories

Unrated severityNVD Advisory· Published Jun 14, 2023· Updated Apr 28, 2026

WordPress WooCommerce Stripe Payment Gateway Plugin <= 7.4.0 is vulnerable to Insecure Direct Object References (IDOR)

CVE-2023-34000

Description

Unauth. IDOR vulnerability leading to PII Disclosure in WooCommerce Stripe Payment Gateway plugin <= 7.4.0 versions.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2

Piraeus Bank/WooCommerce Payment Gatewayllm-fuzzy
Range: <=7.4.0
WooCommerce/Stripe Payment Gatewaycpe-rescue
Range: n/a

Patches

Vulnerability mechanics

References

2

patchstack.com/articles/unauthenticated-idor-to-pii-disclosure-vulnerability-in-woocommerce-stripe-gateway-pluginmitretechnical-descriptionthird-party-advisory
patchstack.com/database/vulnerability/woocommerce-gateway-stripe/wordpress-woocommerce-stripe-payment-gateway-plugin-7-4-0-insecure-direct-object-references-idor-vulnerabilitymitrevdb-entry

News mentions

0

No linked articles in our index yet.