PT-2025-48233 · WordPress+1 · Skt Paypal For Woocommerce+1

Ch4R0N · Published 2025-11-27 · Updated 2025-11-27 · CVE-2025-7820

Positive Technologies · (AI Summary)

CVSS v3.1

7.5

High

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions SKT PayPal for WooCommerce plugin for WordPress versions prior to 1.5

Description The SKT PayPal for WooCommerce plugin for WordPress is susceptible to a payment bypass issue. This occurs because the plugin relies solely on client-side controls for payment processing, rather than implementing server-side validation. This allows unauthenticated attackers to complete purchases without making actual payments.

Recommendations Update the SKT PayPal for WooCommerce plugin to version 1.5 or later.

Fix

Weakness Enumeration

CWE-602

Related Identifiers

CVE-2025-7820

Affected Products

Skt Paypal For Woocommerce

Woocommerce

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2025-7820 · Security Note
• https://twitter.com/CVEnew/status/1993906108390346992 · Twitter Post
• https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3403118%40skt-paypal-for-woocommerce&new=3403118%40skt-paypal-for-woocommerce&sfp_email=&sfph_mail= · Note
• https://t.me/CVEtracker/38362 · Telegram Post
• https://wordfence.com/threat-intel/vulnerabilities/id/1a67b1b3-eb39-4e9a-ba44-ea637fc3bba1?source=cve · Note
• https://twitter.com/The_SatyaDVV/status/1993974759533555896 · Twitter Post