CVE-2025-23872

CVE-2025-23872 describes a Cross-Site Request Forgery (CSRF) vulnerability in the PayForm WordPress plugin that enables Stored XSS. Affected product: PayForm (WordPress plugin); vulnerability scope indicated as PayForm: from n/a through 2.0. Underlying risk details in the connected records show a...