This vulnerability (CWE-288) in ThemeHigh Stripe Payment Gateway for WooCommerce enables authentication bypass through an alternate path or channel, specifically impacting the password recovery functionality. The issue affects versions through 5.0.7. The CVSS 3.1 score of 6.5 reflects a network attack vector with low attack complexity, no privileges required, and no user interaction needed, causing limited integrity and availability impact. No vendor advisory or patch information is provided, and the product is not a cloud service.

Successful exploitation could allow an attacker to bypass authentication controls by exploiting the password recovery process, potentially leading to limited integrity and availability impacts on the affected system. There is no evidence of confidentiality impact. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should monitor vendor communications for updates. No specific temporary mitigations are documented at this time.