Payment Plugins for Stripe WooCommerce — Vulnerabilities & Security Advisories 3

All 3 CVE vulnerabilities found in Payment Plugins for Stripe WooCommerce, with AI-generated Chinese analysis, references, and POCs.

Vendor: paymentplugins

CVE ID	Title	CVSS	Severity	Published
CVE-2026-89100	Payment Plugins for Stripe WooCommerce <= 4.0.17 - Reflected DOM-Based Cross-Site Scripting via '#response' URL Fragment CWE-79	6.1	Medium	2026-10-10
CVE-2026-80339	Payment Plugins for Stripe WooCommerce < 4.0.12 - Unauthenticated Customer PII Disclosure via order-pay	-	-	2026-09-09
CVE-2026-12654	Payment Plugins for Stripe WooCommerce <= 4.0.7 - Missing Authorization to Unauthenticated Arbitrary Order Status Modification via Empty Webhook Secret CWE-862	5.3	Medium	2026-07-24

All 3 known CVE vulnerabilities affecting Payment Plugins for Stripe WooCommerce with full Chinese analysis, references, and POCs where available.