CVE-2025-12355 | Payaza Plugin up to 0.3.8 on WordPress AJAX Endpoint wp_ajax_nopriv_update_order_status authorization

SecurityVulns

A vulnerability described as problematic has been identified in Payaza Plugin up to 0.3.8 on WordPress. Affected by this vulnerability is the function wp_ajax_nopriv_update_order_status of the component AJAX Endpoint. Executing manipulation can lead to missing authorization.

The identification of this vulnerability is CVE-2025-12355. The attack may be launched remotely. There is no exploit available.VulDB Recent EntriesRead More