Stripe for WooCommerce Security Update: Patch and Checkout Checklist
August 6, 2026
WooCommerce released a security update for Stripe for WooCommerce. Stores using versions 9.7.0 through 10.8.4 should update immediately. WooCommerce recommends the latest patched release, 10.8.5, or the corrected build for the current release line.
WooCommerce says it has no evidence of real-world abuse or access to store, customer, or payment data. The highest-impact issue could make an affected store unavailable in some circumstances, so treat the update as a checkout-continuity priority.
Who needs to act
- WooCommerce stores with Stripe for WooCommerce or WooCommerce Stripe Payment Gateway installed.
- Stores on version 9.7.0 through 10.8.4, including stores that received the July payment-validation update.
- Agencies, hosts, and support teams responsible for several managed WooCommerce stores.
Patch the payment extension
- Confirm the store has a current, recoverable backup under its existing backup policy.
- In WordPress, review the installed Stripe for WooCommerce version and apply the available update.
- Prefer version 10.8.5. If a store must remain on a current release line temporarily, install WooCommerce’s corrected build for that line.
- Clear the store cache through the established maintenance process, without changing backup schedules or payment settings.
Patched versions by release line
- 10.8.x: 10.8.5
- 10.7.x: 10.7.2
- 10.6.x: 10.6.3
- 10.5.x: 10.5.4
- 10.4.x: 10.4.1
- 10.3.x: 10.3.2
- 10.2.x: 10.2.1
- 10.1.x: 10.1.1
- 10.0.x: 10.0.2
- 9.9.x: 9.9.3
- 9.8.x: 9.8.2
- 9.7.x: 9.7.2
Verify checkout safely
- Confirm the configured Stripe payment methods still appear where they normally should.
- Use the store’s normal approved checkout quality-assurance workflow to confirm that an order can proceed as expected.
- Confirm that order status updates, confirmation messages, and existing fulfillment or accounting integrations continue to behave normally.
- Review the WordPress and payment-extension health indicators for new errors after the update.
For WordPress support teams
This is separate from the July Stripe payment-validation update. Stores that previously updated to 10.6.2, 10.7.1, or 10.8.4 for that earlier advisory need this update too. For a broader payment-setting review, see our Stripe payment validation checklist. Use the WordPress support hub for maintenance, cache, and availability follow-up, and visit the WooCommerce hub for adjacent store operations guides.
What to tell store owners
Tell store owners that the payment extension received a security update and that the store was checked after patching. Keep the message focused on the actions completed, whether checkout passed the approved verification flow, and any follow-up maintenance window if a store cannot update immediately.
