ThemeHigh Stripe Payment Gateway for WooCommerce Broken Authentication Vulnerability

A vulnerability allowing authentication bypass has been identified in the ThemeHigh Stripe Payment Gateway for WooCommerce, affecting versions through 5.0.7. This vulnerability allows exploitation of the password recovery process, potentially leading to unauthorized actions that should only be performed by users with higher privileges.

Impact

Exploitation of this vulnerability could allow a malicious actor to perform actions reserved for higher privileged users, potentially gaining administrative access to the website.

Remediation

Users of the ThemeHigh Stripe Payment Gateway for WooCommerce should update to version 5.0.8 or later. Patchstack users can enable auto-update for vulnerable plugins.