CVE-2023-3162

The Stripe Payment Plugin for WooCommerce plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 3.7.7. This is due to insufficient verification on the user being supplied during a Stripe checkout through the plugin. This allows unauthenticated attackers to log in as users who have orders, who are typically customers.

• CWE-288

• https://plugins.trac.wordpress.org/browser/payment-gateway-stripe-and-woocommerce-integration/tags/3.7.7/includes/class-stripe-checkout.php#L640Patch
• https://plugins.trac.wordpress.org/changeset/2925361/payment-gateway-stripe-and-woocommerce-integrationPatch
• https://www.wordfence.com/threat-intel/vulnerabilities/id/4d052f3e-8554-43f0-a5ae-1de09c198d7b?source=cveThird Party Advisory
• https://plugins.trac.wordpress.org/browser/payment-gateway-stripe-and-woocommerce-integration/tags/3.7.7/includes/class-stripe-checkout.php#L640Patch
• https://plugins.trac.wordpress.org/changeset/2925361/payment-gateway-stripe-and-woocommerce-integrationPatch
• https://www.wordfence.com/threat-intel/vulnerabilities/id/4d052f3e-8554-43f0-a5ae-1de09c198d7b?source=cveThird Party Advisory

Published

Aug 31, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-31614An issue in the mp_box_deserialize_string function in openli…7.5
• CVE-2023-31615An issue in the chash_array component of openlink virtuoso-o…7.5
• CVE-2023-31616An issue in the bif_mod component of openlink virtuoso-opens…7.5
• CVE-2023-31617An issue in the dk_set_delete component of openlink virtuoso…7.5
• CVE-2023-31618An issue in the sqlc_union_dt_wrap component of openlink vir…7.5
• CVE-2023-31619An issue in the sch_name_to_object component of openlink vir…7.5
• CVE-2023-31620An issue in the dv_compare component of openlink virtuoso-op…7.5
• CVE-2023-31621An issue in the kc_var_col component of openlink virtuoso-op…7.5
• CVE-2023-31622An issue in the sqlc_make_policy_trig component of openlink …7.5
• CVE-2023-31623An issue in the mp_box_copy component of openlink virtuoso-o…7.5
• CVE-2023-31624An issue in the sinv_check_exp component of openlink virtuos…7.5
• CVE-2023-31625An issue in the psiginfo component of openlink virtuoso-open…7.5