4.3 Medium

CVE-2025-48111 Cross-Site Request Forgery (CSRF) vulnerability in YITHEMES YITH PayPal Express Checkout for WooCommerce allows Cross…

Description

Cross-Site Request Forgery (CSRF) vulnerability in YITHEMES YITH PayPal Express Checkout for WooCommerce allows Cross Site Request Forgery. This issue affects YITH PayPal Express Checkout for WooCommerce: from n/a through 1.49.0.

Affected products and versions

Product	Affected versions	Fixed in
YITH PayPal Express Checkout for WooCommerce 1.49	earliest → 1.49.0	No fix stated

Do you use YITH PayPal Express Checkout for WooCommerce?

Track this CVE Watch YITH PayPal Express Checkout for WooCommerce Check my SBOMs

www.cveye.io/en/cve/CVE-2025-48111

Timeline

Published June 17, 2025
Last modified April 28, 2026

References

patchstack.com patchstack.com

Track this CVE