Description
WordPress Plugin Stripe For WooCommerce is prone to a security bypass vulnerability. Exploiting this issue may allow attackers to perform otherwise restricted actions and subsequently configure their account to use other site users unique STRIPE identifier and make purchases with their payment accounts. WordPress Plugin Stripe For WooCommerce versions between 3.0.0 and (including) 3.3.9 are vulnerable.
Remediation
Update to plugin version 3.3.10 or latest
References
https://www.wordfence.com/vulnerability-advisories/#CVE-2021-39347
https://plugins.svn.wordpress.org/woo-stripe-payment/trunk/readme.txt
Related Vulnerabilities
WordPress Plugin Google Alert And Twitter Multiple Vulnerabilities (3.1.5)
WordPress Plugin Spam protection, AntiSpam, FireWall by CleanTalk Cross-Site Scripting (5.154)
Seo Panel Server-Side Request Forgery (SSRF) Vulnerability (CVE-2024-22648)
Oracle Application Server CVE-2008-2609 Vulnerability (CVE-2008-2609)