What is CVE-2025-7820?

CVE-2025-7820 is a high-severity vulnerability in Sonalsinha21 Skt Paypal For Woocommerce, classified under CWE-602. CVSS score: 7.5/10. Published 2025-11-27.

How severe is CVE-2025-7820?

High severity. CVSS v3 base score is 7.5 out of 10.

Vulnerability in Sonalsinha21 Skt Paypal For Woocommerce

CVE-2025-7820

The SKT PayPal for WooCommerce plugin for WordPress is vulnerable to Payment Bypass in all versions up to, and including, 1.4. This is due to the plugin only enforcing client side controls instead of server-side controls when processing payments. This makes it possible for unauthenticated attackers to make confirmed purchases without actually paying for them.

EPSS: 0.003 (24.4th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N.

Affected products

Sonalsinha21 Skt Paypal For Woocommerce — versions 0

Weakness classification (CWE)

CWE-602

References

Frequently asked questions

What is CVE-2025-7820?: CVE-2025-7820 is a high-severity vulnerability in Sonalsinha21 Skt Paypal For Woocommerce, classified under CWE-602. CVSS score: 7.5/10. Published 2025-11-27.
How severe is CVE-2025-7820?: High severity. CVSS v3 base score is 7.5 out of 10.