Cross-Site Request Forgery Vulnerability in Avishi WP PayPal Payment Button Plugin for WordPress

CVE-2025-7669

What is CVE-2025-7669?

The Avishi WP PayPal Payment Button plugin for WordPress suffers from a Cross-Site Request Forgery vulnerability, allowing unauthenticated attackers to issue forged requests due to inadequate nonce validation. This weakness may enable malicious actors to manipulate settings or inject harmful scripts if they can trick site administrators into performing specific actions, such as clicking a link. Users are advised to review and implement security measures to safeguard against potential exploits related to this vulnerability.

References