CVE-2023-34000: Woocommerce Stripe Payment Gateway

High severity, CVSS 7.5. EPSS: 1.2% chance of exploitation in the next 30 days.

Unauth. IDOR vulnerability leading to PII Disclosure in WooCommerce Stripe Payment Gateway plugin <= 7.4.0 versions.

Affected products

• Woocommerce Stripe Payment Gateway: before 7.4.1 (fixed in 7.4.1)

Published 2023-06-14. Last modified 2026-06-17.