CVE-2025-25171

The CVE-2025-25171 entry concerns WordPress WP SmartPay up to version 2.7.13, where an Authentication Bypass via an alternate path or channel allows Authentication Abuse (potential account takeover). Affected component: WP SmartPay plugin; root cause described as an authentication bypass enabling...