Known Vulnerabilities for WP Stripe Checkout by Unknown
Listed below are 10 of the newest known vulnerabilities associated with "WP Stripe Checkout" by "Unknown".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-115450 json | External Control of Assumed-Immutable Web Parameter (CWE-472) in the cart and checkout flow of MarcosCamara01 Ecommerce Templ... | Not Provided | 2026-10-22 | 2026-10-22 |
| CVE-2026-112293 json | BoxyHQ Enterprise SaaS Starter Kit through 1.6.0 contains a missing authorization vulnerability that allows non-owner team me... | Not Provided | 2026-10-19 | 2026-10-22 |
| CVE-2026-110285 json | The WP Stripe Checkout WordPress plugin before 1.2.2.62 does not verify the Stripe webhook signature when no signing secret i... | Not Provided | 2026-10-25 | 2026-10-25 |
| CVE-2026-109937 json | The Otter Blocks WordPress plugin before 3.2.3 does not validate that a user-supplied return URL belongs to the site before ... | Not Provided | 2026-10-18 | 2026-10-18 |
| CVE-2026-107852 json | Jexactyl is a customisable game management panel and billing system. Prior to 4.0.5, the POST /api/client/billing/stripe/proc... | Not Provided | 2026-10-09 | 2026-10-14 |
| CVE-2026-103376 json | The PeachPay — Payments & Express Checkout for WooCommerce (supports Stripe, PayPal, Square, Authorize.net, NMI) WordPress ... | Not Provided | 2026-10-17 | 2026-10-18 |
| CVE-2026-103266 json | Ghost versions 5.2.0 through versions prior to 6.62.0 allow a remote attacker, without authentication, to abuse the Stripe Ch... | Not Provided | 2026-10-01 | 2026-10-06 |
| CVE-2026-90896 json | Missing Authentication for Critical Function (CWE-306) in the checkout session lookup handler (src/app/api/stripe/checkout_se... | Not Provided | 2026-09-14 | 2026-09-15 |
| CVE-2026-81424 json | The Accept Stripe Payments WordPress plugin before 2.1.4 does not verify that the product fulfilled when a checkout is comple... | Not Provided | 2026-09-05 | 2026-09-06 |
| CVE-2026-54608 json | MythicalDash is a Pterodactyl client area. In 3.5.4-aurora and earlier, GET /api/stripe/process in backend/app/Api/System/Gat... | Not Provided | 2026-09-17 | 2026-09-18 |