WP Stripe Checkout Plugin Unverified Webhook Signature Vulnerability

Executive Summary

This vulnerability affects the WP Stripe Checkout WordPress plugin before version 1.2.2.62. It fails to verify Stripe webhook signatures when no signing secret is set, which is the default state. This allows unauthenticated attackers to forge payment completion notifications and create completed orders without making any payment.

Useful 0 Not Useful 0

Detection Guidance

Check if the WP Stripe Checkout plugin is installed and verify its version. If it is below 1.2.2.62, the system is vulnerable. Look for suspicious order completions without corresponding payments in WordPress logs.

Useful 0 Not Useful 0

Impact Analysis

Unauthenticated attackers could exploit this to create orders that appear paid without actual payment, leading to financial losses. It undermines the integrity of transactions and could damage customer trust if orders are fulfilled without payment.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability could lead to unauthorized transactions, potentially violating compliance requirements for data integrity and financial security. It may impact adherence to GDPR or HIPAA if customer data is processed incorrectly due to fake orders.

Useful 0 Not Useful 0

Mitigation Strategies

Update the WP Stripe Checkout plugin to version 1.2.2.62 or later immediately. Ensure the Stripe webhook signing secret is configured to enable signature verification.

Useful 0 Not Useful 0