This vulnerability (CVE-2024-43315) in the Stripe Payments For WooCommerce plugin by Checkout allows an attacker to bypass authorization controls by manipulating a user-controlled key. The issue is categorized under CWE-639, which involves authorization bypass due to improper validation of user input. The affected versions include all versions up to 1.9.1. The CVSS 3.1 base score is 7.5, reflecting a network attack vector with low complexity, no privileges required, no user interaction, and high confidentiality impact but no integrity or availability impact. No patch or official remediation level has been provided by the vendor as of the publication date.

Successful exploitation of this vulnerability could allow an attacker to gain unauthorized access to functionality or data protected by the plugin's authorization mechanisms. The impact is limited to confidentiality as per the CVSS vector, with no direct impact on integrity or availability. There are no reports of active exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider restricting access to the affected plugin functionality and monitor for updates from the vendor. Avoid exposing the plugin to untrusted users or networks where possible.