Aug. 1, 2023, 2:50 p.m. | István Márton

Wordfence www.wordfence.com

On June 8, 2023, our Wordfence Threat Intelligence team identified and began the responsible disclosure process for an Authentication Bypass vulnerability in WebToffee’s Stripe Payment Plugin for WooCommerce plugin, which is actively installed on more than 10,000 WordPress websites. This vulnerability makes it possible for an attacker to gain access to the accounts of users ...
Read More


The post WebToffee Addresses Authentication Bypass Vulnerability in Stripe Payment Plugin for WooCommerce WordPress Plugin appeared first on Wordfence.

addresses authentication authentication bypass bypass bypass vulnerability disclosure intelligence june payment plugin process research responsible responsible disclosure stripe team threat threat intelligence vulnerabilities vulnerability websites woocommerce wordfence wordpress wordpress plugin wordpress security

More from www.wordfence.com / Wordfence

Social Engineer For Reverse Engineering Exploit Study

@ Independent study | Remote

Information Security Engineer, Sr. (Container Hardening)

@ Rackner | San Antonio, TX

BaaN IV Techno-functional consultant-On-Balfour

@ Marlabs | Piscataway, US

Senior Security Analyst

@ BETSOL | Bengaluru, India

Security Operations Centre Operator

@ NEXTDC | West Footscray, Australia

Senior Network and Security Research Officer

@ University of Toronto | Toronto, ON, CA