Cross-Site Scripting Vulnerability in Recurring PayPal Donations by WPECommerce

CVE-2025-57891

What is CVE-2025-57891?

A Cross-site Scripting (XSS) vulnerability has been identified in the Recurring PayPal Donations plugin developed by WPECommerce. This security issue arises from improper handling of user input during web page generation, allowing attackers to inject malicious scripts. If exploited, this vulnerability could enable unauthorized access and manipulation of user data surrounding donation interactions. It is crucial for users of the affected versions to implement necessary updates and safeguards to protect their websites from potential exploits.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References