CVE-2021-47983: MRA13 Accept Stripe Payments

Medium severity, CVSS 6.4. EPSS: 0.2% chance of exploitation in the next 30 days.

WordPress Plugin Stripe Payments before 2.0.40 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts through the AcceptStripePayments-settings[currency_code] parameter. Attackers can submit POST requests to /wp-admin/options.php with script payloads in the currency_code field to execute arbitrary JavaScript in administrator browsers when settings are viewed.

Affected products

• MRA13 Accept Stripe Payments: before 2.0.40 (fixed in 2.0.40)

Published 2026-06-08. Last modified 2026-08-27.