Is Payment Plugins for Stripe WooCommerce safe?

Every recorded flaw

• Oct 10, 2026Payment Plugins for Stripe WooCommerce: Reflected Cross-Site ScriptingCVE-2026-89100 · affects up to 4.0.17 · reported by WordfenceMedium 6.1
• Sep 9, 2026Payment Plugins for Stripe WooCommerce: Does not validate the order key before adding order data to the JavaScript configuration it outputs on the front endCVE-2026-80339 · fixed in 4.0.12 · reported by WPScanMedium 5.3
• Jul 27, 2026Unauthenticated Broken Access Control in Stripe For WooCommerce <= 4.0.7 versions.CVE-2026-59530 · affects up to 4.0.7 · reported by PatchstackHigh 7.5
• Jul 24, 2026Payment Plugins for Stripe WooCommerce: Authorization bypassCVE-2026-12654 · affects up to 4.0.7 · reported by WordfenceMedium 5.3
• Oct 4, 2021The Stripe for WooCommerce WordPress plugin is missing a capability check on the save() function found in the ~/includes/admin/class-wc-stripe-admin-user-edit.pCVE-2021-39347 · affects 3.0.0 to 3.3.9 · reported by WordfenceMedium 4.3

Records come from the National Vulnerability Database, published by the researchers who found each flaw (Wordfence, Patchstack, WPScan and others); exploited status from CISA; exploit odds from FIRST’s EPSS; current version, installs and closures from wordpress.org, checked daily. Want every plugin on your site checked at once? Run the free website check.