Cross-Site Scripting Vulnerability in Recurring PayPal Donations by WPECommerce

CVE-2025-57891

What is CVE-2025-57891?

A Cross-site Scripting (XSS) vulnerability has been identified in the Recurring PayPal Donations plugin developed by WPECommerce. This security issue arises from improper handling of user input during web page generation, allowing attackers to inject malicious scripts. If exploited, this vulnerability could enable unauthorized access and manipulation of user data surrounding donation interactions. It is crucial for users of the affected versions to implement necessary updates and safeguards to protect their websites from potential exploits.

References