CVE-2025-23872 Information

Description

Cross-Site Request Forgery (CSRF) vulnerability in PayForm PayForm allows Stored XSS.This issue affects PayForm: from n/a through 2.0.

Reference

https://patchstack.com/database/wordpress/plugin/payform/vulnerability/wordpress-payform-plugin-2-0-csrf-to-stored-xss-vulnerability?_s_id=cve