What you need to know
We’ve released patched versions of Stripe for WooCommerce to address a payment validation issue affecting some stores using Adaptive Pricing. If you run, maintain, host, or support WooCommerce stores with Stripe for WooCommerce installed, please make sure affected stores are updated to a patched version as soon as possible.
The issue affects Stripe for WooCommerce versions 10.6.0 through 10.8.3 when Adaptive Pricing is enabled. The patched versions are 10.6.2, 10.7.1, and 10.8.4.
We’re coordinating automatic updates where possible, but some stores may still need a manual update. Developers, agencies, and hosting providers should verify client sites rather than assuming every affected store has already updated.
A payment validation issue affected some Adaptive Pricing payments
A payment validation issue was identified in Stripe for WooCommerce when Adaptive Pricing is enabled. Under certain conditions, the payment amount processed by Stripe could differ from the WooCommerce order total.
We investigated the report, prepared patches for affected release lines, and coordinated with the WordPress.org Plugins Team on automatic updates for stores that can receive them.
We are not publishing procedural details about the issue while stores are still updating. This advisory is focused on the action store owners, developers, agencies, and hosts should take now.
Stores using Stripe for WooCommerce 10.6.0 through 10.8.3 with Adaptive Pricing enabled may be affected
You may be affected if all of the following are true:
- Your store uses Stripe for WooCommerce.
- Your store is running version 10.6.0 through 10.8.3.
- Adaptive Pricing is enabled.
Stores running 10.8.x had broader exposure because Adaptive Pricing was enabled for connected accounts in that release line. Stores running 10.7.x may be affected because Adaptive Pricing was enabled for new merchants. Stores running 10.6.x may be affected if Adaptive Pricing was enabled manually.
If your store is running 10.6.2, 10.7.1, or 10.8.4, no further action is needed for this issue.
Update Stripe for WooCommerce to a patched version as soon as possible
Check your installed version of Stripe for WooCommerce and update immediately if you are running an affected version.
From your WordPress Admin dashboard:
- Go to Dashboard → Updates.
- Look for WooCommerce Stripe Payment Gateway or Stripe for WooCommerce.
- If an update is available, select the extension and click Update now.
- Confirm the store is running 10.6.2, 10.7.1, 10.8.4, or a newer patched version.
If you can’t update immediately, temporarily disable Adaptive Pricing until the extension can be updated. This should only be a short-term mitigation. The recommended fix is to update to a patched version.
Patched versions are available for each affected release line
Use this table to check whether your store is on a patched version.
| If you are running | Update to |
| 10.6.0 or 10.6.1 | 10.6.2 |
| 10.7.0 | 10.7.1 |
| 10.8.0, 10.8.1, 10.8.2, or 10.8.3 | 10.8.4 |
If your version is older than 10.6.0, this specific issue does not apply based on the currently identified affected range. We still recommend keeping Stripe for WooCommerce and all other extensions up to date.
Developers, agencies, and hosts should verify client sites directly
If you support WooCommerce merchants, we strongly encourage you to:
- Share this advisory with clients using Stripe for WooCommerce.
- Verify that client sites running affected versions have updated to a patched version.
- Prioritize stores using Adaptive Pricing.
- Temporarily disable Adaptive Pricing if a store can’t be updated immediately.
- Monitor affected stores for unusual payment activity.
Do not wait for a merchant-facing notice before updating stores you manage. The safest path is to verify the installed version directly.
The issue was reported responsibly through HackerOne
This issue was responsibly reported through HackerOne by e0x1337. Thank you for helping keep WooCommerce merchants safe.
WooCommerce support can help with store update questions
If you manage a store and need help updating Stripe for WooCommerce, please contact WooCommerce support.
If you maintain an extension, host WooCommerce stores, or support merchants and have a developer-specific question about this advisory, use the WooCommerce Community Slack or comment where this advisory is shared.
We will continue to update this post if more information becomes available.
Leave a Reply