Payment Bypass Vulnerability in SKT PayPal for WooCommerce Plugin by WordPress
CVE-2025-7820

7.5HIGH

Key Information:

Vendor

WordPress
Status
Skt Paypal For WooCommerce
Vendor
CVE Published:
27 November 2025

What is CVE-2025-7820?

The SKT PayPal for WooCommerce plugin is susceptible to a Payment Bypass vulnerability due to its reliance on client-side controls for payment processing rather than implementing robust server-side safeguards. This oversight can be exploited by attackers without authentication, enabling them to execute confirmed purchases without making actual payments, which poses significant risks to merchants relying on this payment gateway.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

SKT PayPal for WooCommerce * <= 1.4

References

https://www.wordfence.com/threat-intel/vulnerabilities/id...
https://plugins.trac.wordpress.org/changeset?sfp_email=&s...

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

ch4r0n
JSON
.