Scott Paterson Easy Stripe Remote Code Execution Vulnerability
Vulnerability
A remote code execution vulnerability has been identified in the Scott Paterson Easy Stripe WordPress plugin, affecting versions through 1.1. This vulnerability arises from improper control over code generation, allowing for remote code inclusion.
Impact
Exploitation of this vulnerability allows for remote code execution on the affected website, potentially leading to unauthorized access and control over the site.
Remediation
Users of the Easy Stripe WordPress plugin should update to version 1.2 or later. Patchstack users can enable auto-updates for vulnerable plugins.
Added: Jul 4, 2025, 1:02 PM
Updated: Jul 4, 2025, 1:02 PM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
10.0exploitability
7.4remediation
7.7relevance
0.2threat
0.0urgency
2.9incentive
5.8Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.