Description
WordPress Plugin YITH WooCommerce Stripe is prone to a security bypass vulnerability. Exploiting this issue may allow attackers to perform otherwise restricted actions and subsequently modify plugin options. WordPress Plugin YITH WooCommerce Stripe version 2.0.1 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 2.0.2 or latest
References
https://blog.nintechnet.com/authenticated-settings-change-vulnerability-in-yit-plugin-framework/
https://plugins.svn.wordpress.org/yith-woocommerce-stripe/trunk/readme.txt
Related Vulnerabilities
Django Permissions, Privileges, and Access Controls Vulnerability (CVE-2014-0483)
WordPress Plugin VDZ VERIFICATION (Custom Meta Tags) Cross-Site Scripting (1.3.12)
WordPress Plugin Zingiri Web Shop 'abspath' Parameter Remote File Include (2.4.6)
Liferay DXP Missing Critical Step in Authentication Vulnerability (CVE-2025-43798)
Oracle Database Server CVE-2016-0472 Vulnerability (CVE-2016-0472)