CVE-2025-68602

MediumCVSS 4.7

Published: 24/12/2025(UTC)Updated: 07/10/2026(UTC)Translated: 07/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.49%

40th percentile - higher than 40% of all known CVEs

Summary

The WordPress plugin 'Accept Donations with PayPal & Stripe' up to version 1.5.2 has an Open Redirect vulnerability that could be used for phishing.

Risk Assessment

An attacker could redirect users to malicious sites, potentially leading to credential theft or malware infection.

Recommendation

Update the plugin to the latest version if a patch exists. Otherwise, consider restricting redirect functionality and educating users.

Other vulnerabilities in Accept Donations with PayPal & Stripe

CVE-2026-65518Medium
The Accept Donations with PayPal & Stripe plugin versions up to 1.5.5 contain a Cross Site Scripting (XSS) vulnerability exploitable by contributors. A contributor can inject malicious JavaScript code.

Original NVD description (English source)

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Scott Paterson Accept Donations with PayPal & Stripe easy-paypal-donation allows Phishing.This issue affects Accept Donations with PayPal & Stripe: from n/a through <= 1.5.2.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS