Payment Bypass Vulnerability in SKT PayPal for WooCommerce Plugin by WordPress

CVE-2025-7820

What is CVE-2025-7820?

The SKT PayPal for WooCommerce plugin is susceptible to a Payment Bypass vulnerability due to its reliance on client-side controls for payment processing rather than implementing robust server-side safeguards. This oversight can be exploited by attackers without authentication, enabling them to execute confirmed purchases without making actual payments, which poses significant risks to merchants relying on this payment gateway.

References