Known vulnerabilities in Payment Gateway of Stripe for WooCommerce

Integrate Stripe Payment Gateway in WooCommerce and accept cards, Google Pay, Apple Pay, Klarna, Alipay, and more with seamless, secure checkout.

6Reported vulnerabilities

9.8Highest CVSS score

5.0.9Latest version

8,000+Active installs

What to do now

Update Payment Gateway of Stripe for WooCommerce to 5.0.9 or later. 6 of these have a fixed version available. Updating resolves them.

Plugin last updated: June 17, 2026 / Tested up to WordPress: 7.0.4 / View on wordpress.org

Reported vulnerabilities

Ordered by how urgently they need attention — whether a vulnerability is actually being exploited, and how likely exploitation is, rather than CVSS severity alone.

CVE	Severity	Exploit probability next 30 days	Affected versions	Fixed in	Published
CVE-2023-3162	Critical 9.8	1.2%	3.7.7 and earlier	`3.7.8`	August 31, 2023
CVE-2024-0705	High 7.5	2.6%	Before 3.8.0	`3.8.0`	January 19, 2024
WF-bb545a42-6c66-412b-a686-e486b0a58dc5	Medium 6.1	—	3.5.9 and earlier	`3.6.0`	June 7, 2021
CVE-2026-9832	Medium 5.3	0.4%	0 to 5.0.8 (inclusive)	`5.0.9`	September 19, 2026
CVE-2026-45217	Medium 5.3	0.5%	5.0.7 and earlier	`5.0.8`	May 12, 2026
CVE-2023-4040	Medium 5.3	0.5%	Before 3.8.0	`3.8.0`	August 18, 2023

Sources: vulnerability records from NVD, exploitation from CISA KEV, exploit probability from EPSS. Affected versions come from CPE ranges or from the reporting CNA.