CVE-2025-9322 | Stripe Payment Forms by WP Full Pay Plugin up to 8.3.1 on WordPress wpfs-form-name sql injection

October 24, 2025 Yanac

A vulnerability, which was classified as critical, has been found in Stripe Payment Forms by WP Full Pay Plugin up to 8.3.1 on WordPress. The affected element is an unknown function. Performing manipulation of the argument wpfs-form-name results in sql injection.

This vulnerability is identified as CVE-2025-9322. The attack can be initiated remotely. There is not any exploit available.VulDB Recent EntriesRead More