CVE-2025-14073 | WooCommerce PayPal Payments Plugin up to 3.3.2 on WordPress enqueue_paypal_insights_script_on_order_received resource injection

A vulnerability was found in WooCommerce PayPal Payments Plugin up to 3.3.2 on WordPress. It has been declared as problematic. Affected is the function enqueue_paypal_insights_script_on_order_received. The manipulation results in improper control of resource identifiers.

This vulnerability is known as CVE-2025-14073. It is possible to launch the attack remotely. No exploit is available.VulDB Recent EntriesRead More