Unknown Accept Stripe Payments vulnerabilities
3 vulnerabilities
Known vulnerabilities in Unknown Accept Stripe Payments, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2022-2194tipsandtricks-hqaccept_stripe+2
EPSS score0.59%
The Accept Stripe Payments WordPress plugin before 2.0.64 does not sanitize and escape some of its settings, allowing high privilege users such as admin to perform cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.CVE-2026-81423unknownaccept stripe payments+1EPSS score0.30%
The Accept Stripe Payments WordPress plugin before 2.1.4 does not validate a user-supplied URL before using it in a redirect, allowing unauthenticated attackers to redirect visitors to an arbitrary external website, which can be leveraged for phishing.CVE-2026-81424unknownaccept stripe payments+1EPSS score0.30%
The Accept Stripe Payments WordPress plugin before 2.1.4 does not verify that the product fulfilled when a checkout is completed matches the product the authoritative payment was actually made for, checking only that the amount paid is at least the referenced product's price, allowing unauthenticated attackers who complete a genuine payment to obtain fulfilment for a different, equal- or lower-priced product than the one they paid for.