stripe vulnerabilities and fixes

Recent CVEs affecting stripe, with upgrade or downgrade steps. 3 tracked.

stripe has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 3. Most recent: 2021-04-01. Highest priority: CVE-2021-21420 (score 38/100).

• CVE-2021-21420 HIGH 7.5 UPGRADE vscode-stripe is an extension for Visual Studio Code
• CVE-2015-9529 MEDIUM 6.1 UPGRADE MITIGATE The Easy Digital Downloads (EDD) Stripe extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x be
• CVE-2015-9374 MEDIUM 6.1 UPGRADE Stripe Add-on for iThemes Exchange before 1.2.0 for WordPress has XSS via add_query_arg() and remove_query_arg

FAQ

How do I fix stripe vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is stripe being exploited right now?

None of the tracked stripe CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which stripe CVE should I patch first?

CVE-2021-21420 currently ranks highest (38/100): vscode-stripe is an extension for Visual Studio Code.

RSS feed for stripe · ← Back to latest CVEs