CVE-2026-42752
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk13th percentile - higher than 13% of all known CVEs
Summary
Versions of Stripe Payments up to 2.0.98 contain a vulnerability that allows for unauthenticated bypass.
Risk Assessment
Organizations may be exposed to unauthorized transactions and loss of customer data.
Recommendation
It is recommended to update Stripe Payments to the latest version to mitigate this vulnerability.
Other vulnerabilities in Stripe Payments
See all- CVE-2026-78282High
Unauthenticated Cross Site Scripting (XSS) in Stripe Payments <= 2.1.2 versions.
- CVE-2021-47983Medium
WordPress Plugin Stripe Payments before 2.0.40 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts through the AcceptStripePayments-settings[currency_code] parameter. Attackers can submit POST requests to /wp-admin/options.php with script payloads in the currency_code field to execute arbitrary JavaScript in administrator browsers when settings are viewed.
Original NVD description (English source)
Unauthenticated Bypass Vulnerability in Stripe Payments <= 2.0.98 versions.