Cross-Site Request Forgery Vulnerability in Avishi WP PayPal Payment Button Plugin for WordPress

CVE-2025-7669

What is CVE-2025-7669?

The Avishi WP PayPal Payment Button plugin for WordPress suffers from a Cross-Site Request Forgery vulnerability, allowing unauthenticated attackers to issue forged requests due to inadequate nonce validation. This weakness may enable malicious actors to manipulate settings or inject harmful scripts if they can trick site administrators into performing specific actions, such as clicking a link. Users are advised to review and implement security measures to safeguard against potential exploits related to this vulnerability.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References