CVE-2025-9463

🗓️ 12 Sep 2025 07:11:30Reported by redhat.comType

Time-based SQL injection in WooCommerce payment plugins via order_by enables subscriber exfiltration.

Reporter	Title	Published	Views	Family All 9
Circl	CVE-2025-9463	10 Sep 202507:34	–	circl
CNNVD	WordPress plugin Payments Plugin and Checkout Plugin for WooCommerce: Stripe, PayPal, Square, Authorize.net SQL注入漏洞	10 Sep 202500:00	–	cnnvd
CVE	CVE-2025-9463	10 Sep 202506:38	–	cve
Cvelist	CVE-2025-9463 Payments Plugin and Checkout Plugin for WooCommerce: Stripe, PayPal, Square, Authorize.net <= 1.117.5 - Authenticated (Contributor+) SQL Injection via order_by Parameter	10 Sep 202506:38	–	cvelist
NVD	CVE-2025-9463	10 Sep 202507:15	–	nvd
Patchstack	WordPress PeachPay Payments plugin <= 1.117.5 - Authenticated (Contributor+) SQL Injection via order_by Parameter vulnerability	9 Sep 202523:56	–	patchstack
Positive Technologies	PT-2025-37021	10 Sep 202500:00	–	ptsecurity
Vulnrichment	CVE-2025-9463 Payments Plugin and Checkout Plugin for WooCommerce: Stripe, PayPal, Square, Authorize.net <= 1.117.5 - Authenticated (Contributor+) SQL Injection via order_by Parameter	10 Sep 202506:38	–	vulnrichment
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (September 8, 2025 to September 14, 2025)	18 Sep 202514:42	–	wordfence