CVE-2023-52143: 
WordPress vulnerability analysis and mitigation

A sensitive data exposure vulnerability (CVE-2023-52143) was discovered in the WP Stripe Checkout WordPress plugin, affecting versions up to 1.2.2.37. The vulnerability was reported on December 28, 2023, and involves the exposure of sensitive information to unauthorized actors through log files (Patchstack Report).

The vulnerability is classified as CWE-532 (Insertion of Sensitive Information into Log File) and received a CVSS v3.1 base score of 7.5 (HIGH). The attack vector is network-based (AV:N) with low attack complexity (AC:L), requiring no privileges (PR:N) or user interaction (UI:N). The scope is unchanged (S:U) with high confidentiality impact (C:H) but no impact on integrity (I:N) or availability (A:N) (NVD).

The vulnerability could allow malicious actors to view sensitive information that is normally not accessible to regular users. This exposed data could potentially be used to exploit other weaknesses in the system (Patchstack Report).

The vulnerability has been fixed in version 1.2.2.38 of the WP Stripe Checkout plugin. Users are advised to update to this version or later to remove the vulnerability (Patchstack Report).