CVE-2023-34000

PoC —

CVSS 3.1

7.5 high

EPSS

1%p67

Published

Jun 14, 2023 (Jun 14, 2023)

Modified

Jun 17, 2026

Description

Unauth. IDOR vulnerability leading to PII Disclosure in WooCommerce Stripe Payment Gateway plugin <= 7.4.0 versions.

Vendors: woocommerce
Products: stripe payment gateway
Ecosystems: WordPress, E-commerce
Weakness: CWE-639
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (1.2%)

In the news2 stories

Critical Security Vulnerability Discovered in WooCommerce Stripe Gateway Plugin

The Hacker NewsJun 15, 00:00 UTC · Jun 15, 2023Vulnerability CVE-2023-34000

60

Critical flaw found in the WooCommerce Stripe Gateway Plugin

Security AffairsJun 14, 13:32 UTC · Jun 14, 2023Vulnerability CVE-2023-34000

60