CVE-2025-7820

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2025-7820", "assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "state": "PUBLISHED", "assignerShortName": "Wordfence", "dateReserved": "2025-07-18T17:34:58.374Z", "datePublished": "2025-11-27T04:36:43.662Z", "dateUpdated": "2026-04-08T16:38:05.098Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "shortName": "Wordfence", "dateUpdated": "2026-04-08T16:38:05.098Z"}, "affected": [{"vendor": "sonalsinha21", "product": "SKT PayPal for WooCommerce", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "1.4", "versionType": "semver"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "The SKT PayPal for WooCommerce plugin for WordPress is vulnerable to Payment Bypass in all versions up to, and including, 1.4. This is due to the plugin only enforcing client side controls instead of server-side controls when processing payments. This makes it possible for unauthenticated attackers to make confirmed purchases without actually paying for them."}], "title": "SKT PayPal for WooCommerce <= 1.4 - Unauthenticated Payment Bypass", "references": [{"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/1a67b1b3-eb39-4e9a-ba44-ea637fc3bba1?source=cve"}, {"url": "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3403118%40skt-paypal-for-woocommerce&new=3403118%40skt-paypal-for-woocommerce&sfp_email=&sfph_mail="}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "CWE-602 Client-Side Enforcement of Server-Side Security", "cweId": "CWE-602", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "baseScore": 7.5, "baseSeverity": "HIGH"}}], "credits": [{"lang": "en", "type": "finder", "value": "ch4r0n"}], "timeline": [{"time": "2025-07-21T15:23:49.000Z", "lang": "en", "value": "Vendor Notified"}, {"time": "2025-11-26T16:26:34.000Z", "lang": "en", "value": "Disclosed"}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-11-28T14:41:18.414654Z", "id": "CVE-2025-7820", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-11-28T19:33:21.109Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-7820", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2025-11-28T14:41:18.414654Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-11-28T14:41:19.165Z"}}], "cna": {"title": "SKT PayPal for WooCommerce <= 1.4 - Unauthenticated Payment Bypass", "credits": [{"lang": "en", "type": "finder", "value": "ch4r0n"}], "metrics": [{"cvssV3_1": {"version": "3.1", "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"}}], "affected": [{"vendor": "sonalsinha21", "product": "SKT PayPal for WooCommerce", "versions": [{"status": "affected", "version": "0", "versionType": "semver", "lessThanOrEqual": "1.4"}], "defaultStatus": "unaffected"}], "timeline": [{"lang": "en", "time": "2025-07-21T15:23:49.000Z", "value": "Vendor Notified"}, {"lang": "en", "time": "2025-11-26T16:26:34.000Z", "value": "Disclosed"}], "references": [{"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/1a67b1b3-eb39-4e9a-ba44-ea637fc3bba1?source=cve"}, {"url": "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3403118%40skt-paypal-for-woocommerce&new=3403118%40skt-paypal-for-woocommerce&sfp_email=&sfph_mail="}], "descriptions": [{"lang": "en", "value": "The SKT PayPal for WooCommerce plugin for WordPress is vulnerable to Payment Bypass in all versions up to, and including, 1.4. This is due to the plugin only enforcing client side controls instead of server-side controls when processing payments. This makes it possible for unauthenticated attackers to make confirmed purchases without actually paying for them."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-602", "description": "CWE-602 Client-Side Enforcement of Server-Side Security"}]}], "providerMetadata": {"orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "shortName": "Wordfence", "dateUpdated": "2026-04-08T16:38:05.098Z"}}}, "cveMetadata": {"cveId": "CVE-2025-7820", "state": "PUBLISHED", "dateUpdated": "2026-04-08T16:38:05.098Z", "dateReserved": "2025-07-18T17:34:58.374Z", "assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "datePublished": "2025-11-27T04:36:43.662Z", "assignerShortName": "Wordfence"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "SKT PayPal for WooCommerce", "vendor": "sonalsinha21", "versions": [{"lessThanOrEqual": "1.4", "status": "affected", "version": "0", "versionType": "semver"}]}], "source": "security@wordfence.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "The SKT PayPal for WooCommerce plugin for WordPress is vulnerable to Payment Bypass in all versions up to, and including, 1.4. This is due to the plugin only enforcing client side controls instead of server-side controls when processing payments. This makes it possible for unauthenticated attackers to make confirmed purchases without actually paying for them."}, {"lang": "es", "value": "El plugin SKT PayPal para WooCommerce de WordPress es vulnerable a un Bypass de pago en todas las versiones hasta la 1.4, inclusive. Esto se debe a que el plugin solo aplica controles del lado del cliente en lugar de controles del lado del servidor al procesar pagos. Esto hace posible que atacantes no autenticados realicen compras confirmadas sin pagarlas realmente."}], "id": "CVE-2025-7820", "lastModified": "2026-10-18T20:10:00.110", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "security@wordfence.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-7820", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2025-11-28T14:41:18.414654Z", "version": "2.0.3"}}]}, "published": "2025-11-27T05:16:17.913", "references": [{"source": "security@wordfence.com", "url": "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3403118%40skt-paypal-for-woocommerce&new=3403118%40skt-paypal-for-woocommerce&sfp_email=&sfph_mail="}, {"source": "security@wordfence.com", "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/1a67b1b3-eb39-4e9a-ba44-ea637fc3bba1?source=cve"}], "sourceIdentifier": "security@wordfence.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-602"}], "source": "security@wordfence.com", "type": "Secondary"}]}

{}

{"analysis": {"en": {"generated_at": "2026-04-22T16:30:33.570575+00:00", "value": {"mitigation_remediation": ["Upgrade the SKT PayPal for WooCommerce plugin to a version above 1.4 where the issue has been fixed.", "If an upgrade is not immediately possible, disable the plugin\u2019s public payment routes until a patch is applied or switch to a server\u2011side validated gateway.", "Review the WordPress site\u2019s access controls to ensure that only authenticated users can invoke payment processing endpoints, and update the plugin\u2019s configuration to enforce server\u2011side checks where possible."], "summary": {"action": "Immediate Patch", "impact": "Unauthenticated Payment Bypass"}, "threat_synthesis": {"affected_systems": "The vulnerable product is SKT PayPal for WooCommerce by sonalsinha21. All releases with a version number of 1.4 or earlier are affected. Administrators operating WordPress sites that install or use any of these releases should be aware that the plugin is lacking proper server\u2011side checks.", "description_and_impact": "The SKT PayPal for WooCommerce plugin for WordPress has a flaw that allows unauthenticated users to bypass payment checks. Because the plugin relies only on client\u2011side controls when processing orders, an attacker can submit a purchase request and receive a confirmed transaction without actual funds being transferred. This leads to financial loss for the site owner and can result in fraudulent orders. The weakness is a failure to enforce server\u2011side validation, aligning with CWE\u2011602.", "risk_and_exploitability": "The CVSS base score of 7.5 places the issue in the high severity range. The EPSS score of less than 1% indicates a low probability of exploitation at this time, and the vulnerability is not yet listed in CISA KEV. Based on the description, the likely attack vector is a crafted HTTP request to the plugin\u2019s payment endpoint that bypasses authentication checks. The vulnerability resides in front\u2011end logic, so it could be abused remotely over the public internet on any instance that does not restrict access to the payment processing route; this inference comes from the lack of server\u2011side validation. The lack of server\u2011side validation makes the risk high when exercised."}}}}, "created": "2025-11-27T16:26:28.772124+00:00", "updated": "2026-04-22T16:45:21.448732+00:00", "vendors": ["sonalsinha21", "sonalsinha21$PRODUCT$skt_paypal_for_woocommerce", "woocommerce", "woocommerce$PRODUCT$woocommerce", "wordpress", "wordpress$PRODUCT$wordpress"]}