{ "title": "WooCommerce Stripe Payment Gateway", "seo_title": "Stripe for WooCommerce: review, fees and settings", "h1": "WooCommerce Stripe Payment Gateway", "description": "WooCommerce Stripe Payment Gateway in detail: Stripe fees, payment methods, strengths, limits, recommended settings and past vulnerabilities, all patched.", "lead": "WooCommerce Stripe Payment Gateway, the official plugin from WooCommerce and Stripe, takes cards, wallets and local payment methods in your store. Our take to help you decide whether it fits, what it really costs, its past vulnerabilities and the settings to check before you accept real payments.", "language": "en", "locale": "en-US", "type": "plugin-sheet", "url": "https://www.wp-masquerade.com/features/camouflaged-plugins/woocommerce-stripe-payment-gateway/", "canonical": "https://www.wp-masquerade.com/features/camouflaged-plugins/woocommerce-stripe-payment-gateway/", "markdown": "https://www.wp-masquerade.com/features/camouflaged-plugins/woocommerce-stripe-payment-gateway/index.md", "json": "https://www.wp-masquerade.com/features/camouflaged-plugins/woocommerce-stripe-payment-gateway/index.json", "published": "2026-11-04T08:00:00+00:00", "modified": "2026-11-05T21:30:13+00:00", "site": { "name": "WP Masquerade", "url": "https://www.wp-masquerade.com/" }, "translations": [ { "language": "en", "hreflang": "en-US", "title": "WooCommerce Stripe Payment Gateway", "url": "https://www.wp-masquerade.com/features/camouflaged-plugins/woocommerce-stripe-payment-gateway/", "markdown": "https://www.wp-masquerade.com/features/camouflaged-plugins/woocommerce-stripe-payment-gateway/index.md", "json": "https://www.wp-masquerade.com/features/camouflaged-plugins/woocommerce-stripe-payment-gateway/index.json" }, { "language": "fr", "hreflang": "fr-FR", "title": "WooCommerce Stripe Payment Gateway", "url": "https://www.wp-masquerade.com/fr/fonctionnalites/extensions-camouflees/woocommerce-stripe-payment-gateway/", "markdown": "https://www.wp-masquerade.com/fr/fonctionnalites/extensions-camouflees/woocommerce-stripe-payment-gateway/index.md", "json": "https://www.wp-masquerade.com/fr/fonctionnalites/extensions-camouflees/woocommerce-stripe-payment-gateway/index.json" }, { "language": "es", "hreflang": "es-ES", "title": "WooCommerce Stripe Payment Gateway", "url": "https://www.wp-masquerade.com/es/funcionalidades/plugins-camuflados/woocommerce-stripe-payment-gateway/", "markdown": "https://www.wp-masquerade.com/es/funcionalidades/plugins-camuflados/woocommerce-stripe-payment-gateway/index.md", "json": "https://www.wp-masquerade.com/es/funcionalidades/plugins-camuflados/woocommerce-stripe-payment-gateway/index.json" }, { "language": "de", "hreflang": "de-DE", "title": "WooCommerce Stripe Payment Gateway", "url": "https://www.wp-masquerade.com/de/funktionen/getarnte-plugins/woocommerce-stripe-payment-gateway/", "markdown": "https://www.wp-masquerade.com/de/funktionen/getarnte-plugins/woocommerce-stripe-payment-gateway/index.md", "json": "https://www.wp-masquerade.com/de/funktionen/getarnte-plugins/woocommerce-stripe-payment-gateway/index.json" }, { "language": "it", "hreflang": "it-IT", "title": "WooCommerce Stripe Payment Gateway", "url": "https://www.wp-masquerade.com/it/funzionalita/plugin-camuffati/woocommerce-stripe-payment-gateway/", "markdown": "https://www.wp-masquerade.com/it/funzionalita/plugin-camuffati/woocommerce-stripe-payment-gateway/index.md", "json": "https://www.wp-masquerade.com/it/funzionalita/plugin-camuffati/woocommerce-stripe-payment-gateway/index.json" }, { "language": "pt", "hreflang": "pt-BR", "title": "WooCommerce Stripe Payment Gateway", "url": "https://www.wp-masquerade.com/pt/recursos/plugins-wordpress-camuflados/woocommerce-stripe-payment-gateway/", "markdown": "https://www.wp-masquerade.com/pt/recursos/plugins-wordpress-camuflados/woocommerce-stripe-payment-gateway/index.md", "json": "https://www.wp-masquerade.com/pt/recursos/plugins-wordpress-camuflados/woocommerce-stripe-payment-gateway/index.json" }, { "language": "nl", "hreflang": "nl-NL", "title": "WooCommerce Stripe Payment Gateway", "url": "https://www.wp-masquerade.com/nl/functies/gecamoufleerde-plugins/woocommerce-stripe-payment-gateway/", "markdown": "https://www.wp-masquerade.com/nl/functies/gecamoufleerde-plugins/woocommerce-stripe-payment-gateway/index.md", "json": "https://www.wp-masquerade.com/nl/functies/gecamoufleerde-plugins/woocommerce-stripe-payment-gateway/index.json" } ], "headings": [ { "level": 1, "text": "WooCommerce Stripe Payment Gateway" }, { "level": 2, "text": "What WooCommerce Stripe Payment Gateway does in your store" }, { "level": 2, "text": "Which stores the Stripe plugin suits best" }, { "level": 2, "text": "Strengths and limits of the Stripe plugin for WooCommerce" }, { "level": 3, "text": "Strengths" }, { "level": 3, "text": "Limits" }, { "level": 2, "text": "The Stripe settings we recommend" }, { "level": 2, "text": "Past vulnerabilities in the Stripe plugin and what to do" }, { "level": 2, "text": "WooCommerce Stripe Payment Gateway FAQ", "id": "faq" } ], "body": "## The essentials\n\n- Best for WooCommerce stores that want cards, Apple Pay, Google Pay and local payment methods via Stripe.\n- Main caveat: fraud rules, disputes and payouts are handled outside WordPress, in Stripe.\n- Free; for a French account Stripe takes 1.5% + €0.25 per standard EEA card and €20 per dispute.\n\n## What WooCommerce Stripe Payment Gateway does in your store\n\nWooCommerce Stripe Payment Gateway connects a [WooCommerce](https://www.wp-masquerade.com/features/camouflaged-plugins/woocommerce/) store to a Stripe account. Billed as the official plugin from Stripe and WooCommerce, it adds card payments, express checkouts (Apple Pay, Google Pay, Link), buy now, pay later options (Klarna, Affirm, Afterpay) and local methods such as SEPA Direct Debit, iDEAL, Bancontact and BLIK to your checkout. Its settings live under WooCommerce > Settings > Payments > Stripe.\n\nCard numbers are typed into Stripe Elements fields hosted by Stripe, so they never pass through your server. Stripe then reports payment results back to WordPress through webhooks, which have been set up automatically when you connect your account since version 8.6.1. The list of enabled payment methods stays in sync with your Stripe Dashboard. Since version 10.8.0, the Optimized Checkout Suite, which orders payment methods for each shopper, and Adaptive Pricing, which shows prices in the shopper’s local currency, are on by default for eligible stores.\n\nThe plugin itself is free. You pay Stripe’s fees on every successful payment: for an account in France, Stripe’s public pricing lists 1.5% + €0.25 per standard European Economic Area card, with no setup or monthly fees. Refunds, disputes, Radar fraud rules and payouts are mostly managed in the Stripe Dashboard.\n\n![Diagram: WooCommerce Stripe Payment Gateway works on visitors and bots, database and files, external services. Public traces: folder name (hidden with Pro); tag IDs (hidden with Pro); JavaScript variables (still visible); files served by the vendor (still visible); cookies (still visible).](https://www.wp-masquerade.com/media/wpm-sheets/wc-stripe/diagram-en.svg?v=645ce39f)\n\n## Which stores the Stripe plugin suits best\n\nThe plugin makes sense when you have, or are willing to open, a Stripe account in one of the 46 countries where Stripe serves merchants:\n\n- **Stores selling across Europe** that want to offer their customers’ local methods (SEPA, iDEAL, Bancontact, BLIK, Przelewy24).\n- **Mobile-heavy stores** counting on Apple Pay, Google Pay and Link to shorten checkout on phones.\n- **Subscription businesses** using WooCommerce Subscriptions, which relies on payment methods saved with Stripe for renewals.\n- **Merchants already on Stripe** for other sales, who keep one dashboard, one account and the same Radar rules.\n\nIt is the wrong pick if your business is based outside Stripe’s supported countries, or if you want to handle disputes and payouts from the WordPress admin: [WooPayments](https://www.wp-masquerade.com/features/camouflaged-plugins/woopayments/) builds those screens into WooCommerce, on its own terms.\n\n## Strengths and limits of the Stripe plugin for WooCommerce\n\n### Strengths\n\n- **A long list of payment methods.** Cards, wallets, buy now, pay later and local methods are all switched on from one Payment Methods tab.\n- **Card data stays off your server.** Stripe Elements fields simplify PCI DSS compliance, and Strong Customer Authentication (3D Secure) is supported.\n- **Radar included.** Stripe’s fraud screening checks every payment with no setup in WordPress.\n- **Easy connection.** You link the account in a few clicks and webhooks configure themselves, in both live and test mode.\n\n### Limits\n\n- **Management split with Stripe.** Radar rules can’t be configured in the plugin, and disputes and payouts are tracked in the Stripe Dashboard.\n- **Fees on every sale.** Stripe charges per payment, €20 per dispute received in France, and Radar for Fraud Teams adds a per-transaction cost.\n- **Saved cards need an account.** A shopper who checks out as a guest can’t save a card for next time.\n- **Updates that change checkout.** Version 10.8.0 turned on the Optimized Checkout Suite and Adaptive Pricing by default for existing stores, so test after every major update.\n\n## The Stripe settings we recommend\n\nPaths start from WooCommerce > Settings > Payments > Stripe. After each change, place a test order before going back to live mode.\n\n| Setting | Recommended value | Why |\n| --- | --- | --- |\n| **Enable test mode** Settings > General | Off on the live store, on for a staging copy | In test mode, no real money is collected. |\n| **Webhook status** Settings > Account details > Configure connection | “Configured” on both the Live and Test tabs | Stripe updates your store through webhooks, and some payment methods depend on them. If not, click “Reconfigure webhooks”. |\n| **Payment methods** Payment Methods tab | Only the ones your customers actually use | Each method enabled here is enabled in Stripe too; fewer methods means fewer cases to test. |\n| **Enable saved card payment methods** Settings > Payments & transactions | On if customers have accounts, otherwise it has no effect | Speeds up repeat purchases; the card stays with Stripe, not in WordPress. |\n| **Issue an authorization on checkout, and capture later** Settings > Payments & transactions | Off (default) | An uncaptured authorization expires after 7 days, and methods that don’t support it disappear from checkout. |\n| **Add customer order number to the bank statement** Settings > Payments & transactions | On, with a readable shortened statement descriptor | Customers can match the line on their statement to your order more easily. |\n| **Log debug messages** Settings > Advanced settings > Debug mode | Off, except while troubleshooting | It logs all plugin activity to the WooCommerce logs: turn it off once the issue is fixed. |\n\n- In the Stripe Dashboard, open Radar and add rules that fit your customers (card issuing country, card type).\n- In WooCommerce, turn on checkout rate limiting to slow down card-testing bots.\n- Place a small real order, refund it, and check that the order status follows in WooCommerce.\n- Under Plugins, enable auto-updates for WooCommerce Stripe Payment Gateway.\n\n## Past vulnerabilities in the Stripe plugin and what to do\n\nLike any gateway that sits on the checkout page, the plugin has had several vulnerabilities, all patched:\n\n- **June 2023, CVE-2023-34000**: an unauthenticated [IDOR](https://www.wp-masquerade.com/glossary/idor/) exposed personal data tied to orders (CVSS 7.5). Together with CVE-2023-35049, a broken access control flaw, it affected versions up to 7.4.0 and was fixed in 7.4.1.\n- **Late 2023, CVE-2023-44999 and CVE-2023-51502**: a [CSRF](https://www.wp-masquerade.com/glossary/csrf/) flaw fixed in 7.6.1, then another IDOR fixed in 7.6.2.\n- **June 2026, CVE-2026-2381**: up to version 10.7.0, an unauthenticated visitor could push pending orders to “Failed” through the express checkout endpoint (CVSS 6.5). Fixed in 10.8.0.\n\nVersion 11.1.0 also removes account password data that express checkout in version 10.9.0 may have stored in order metadata, so stay on the latest release, 11.1.0 at a minimum. Card fraud and customer account protection are covered in our WooCommerce store security guide. WP Masquerade Pro renames the `woocommerce-gateway-stripe` folder and its script IDs, which makes the plugin harder for bots to spot but does not replace updating; the `wc_stripe_params` variable, the script loaded from `js.stripe.com` and the `__stripe_mid` and `__stripe_sid` cookies stay visible.\n\n## WooCommerce Stripe Payment Gateway FAQ\n\n**Does the Stripe plugin for WooCommerce cost anything?**\n\nNo, the plugin is free. You pay Stripe’s fees on each successful payment, for example 1.5% + €0.25 per standard EEA card for an account in France, plus €20 per dispute received.\n\n**Do I need an SSL certificate to use Stripe?**\n\nYes. In live mode, the plugin requires the store to be served over HTTPS. Test mode works with test keys and collects no real money.\n\n**Can customers save their card without creating an account?**\n\nNo. Saving cards requires a customer account on the store; a guest order can’t keep a payment method. WooCommerce Subscriptions renewals work even with this setting turned off.\n\n**Stripe or WooPayments: which one should I choose?**\n\nBoth come from the WooCommerce team. The Stripe plugin connects straight to your own Stripe account, managed in the Stripe Dashboard; WooPayments brings payments, disputes and payouts into the WordPress admin and uses a WordPress.com account.\n\n## Key facts\n\n- Category: E-commerce\n- Vendor: WooCommerce\n- Price: Free; Stripe fees per payment, 1.5% + €0.25 per standard EEA card for a Stripe account in France\n- Active installations (wordpress.org): 700 000+\n- Version: 11.1.1\n- Official page: https://wordpress.org/plugins/woocommerce-gateway-stripe/\n\n## What WP Masquerade hides\n\n- Handled by WP Masquerade Pro only\n- With Pro: folder name, tag IDs\n- Still visible: JavaScript variables, files served by the vendor, cookies", "catalog": "wc-stripe", "essentials": [ "Best for WooCommerce stores that want cards, Apple Pay, Google Pay and local payment methods via Stripe.", "Main caveat: fraud rules, disputes and payouts are handled outside WordPress, in Stripe.", "Free; for a French account Stripe takes 1.5% + €0.25 per standard EEA card and €20 per dispute." ], "format": "application/json" }