Vulnerabilities (CVE)

Filtered by vendor Noorsplugin Subscribe
Filtered by product Wp Stripe Checkout
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-52143 1 Noorsplugin 1 Wp Stripe Checkout 2024-02-06 N/A 7.5 HIGH
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Naa986 WP Stripe Checkout.This issue affects WP Stripe Checkout: from n/a through 1.2.2.37.
CVE-2022-3986 1 Noorsplugin 1 Wp Stripe Checkout 2023-12-10 N/A 5.4 MEDIUM
The WP Stripe Checkout WordPress plugin before 1.2.2.21 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks