CVE-2025-23804

🗓️ 16 Jan 2025 20:07:06Reported by PatchstackType

CVE-2025-23804 exposes WordPress WP Service Payment Form to CSRF and Reflected XSS vulnerabilities

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2025-23804	16 Jan 202521:16	–	circl
CNNVD	WordPress plugin WP Service Payment Form With Authorize.net 跨站请求伪造漏洞	16 Jan 202500:00	–	cnnvd
Cvelist	CVE-2025-23804 WordPress WP Service Payment Form With Authorize.net Plugin <= 2.6.0 - CSRF to Reflected Cross Site Scripting (XSS) vulnerability	16 Jan 202520:07	–	cvelist
EUVD	EUVD-2025-3436	3 Oct 202520:07	–	euvd
NVD	CVE-2025-23804	16 Jan 202521:15	–	nvd
Patchstack	WordPress WP Service Payment Form With Authorize.net Plugin <= 2.6.0 - CSRF to Reflected Cross Site Scripting (XSS) vulnerability	16 Jan 202518:42	–	patchstack
Positive Technologies	PT-2025-5104 · WordPress · Wp Service Payment Form With Authorize.Net	16 Jan 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-23804	9 Jan 202608:47	–	redhatcve
Vulnrichment	CVE-2025-23804 WordPress WP Service Payment Form With Authorize.net Plugin <= 2.6.0 - CSRF to Reflected Cross Site Scripting (XSS) vulnerability	16 Jan 202520:07	–	vulnrichment
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (January 13, 2025 to January 19, 2025)	23 Jan 202515:41	–	wordfence

Vulners

Node

shiv_prakash_tiwari wp_service_payment_form_with_authorize.netRange≤2.6.0wordpress

[
  {
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "wp-service-payment-form-with-authorizenet",
    "product": "WP Service Payment Form With Authorize.net",
    "vendor": "Shiv Prakash Tiwari",
    "versions": [
      {
        "lessThanOrEqual": "2.6.0",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
patchstack	www.patchstack.com/database/Wordpress/Plugin/wp-service-payment-form-with-authorizenet/vulnerability/wordpress-wp-service-payment-form-with-authorize-net-plugin-2-6-0-csrf-to-reflected-cross-site-scripting-xss-vulnerability

28 Apr 2026 16:11Current

7.2High risk

Vulners AI Score7.2

CVSS 3.17.1

EPSS0.00104

SSVC

CWE-352