Authentication Bypass Vulnerability in Simpler Checkout Plugin for WordPress

CVE-2025-7642

What is CVE-2025-7642?

The Simpler Checkout plugin for WordPress presents a significant security flaw that allows unauthenticated attackers to bypass authentication checks. Versions 0.7.0 through 1.1.9 fail to adequately verify user identities, enabling malicious actors to log in as admin users by exploiting the simplerwc_woocommerce_order_created() function. This vulnerability arises particularly when a site administrator has conducted a test order, leaving the door open for unauthorized access using the corresponding order ID.

References