CVE-2023-35917 Cross-Site Request Forgery (CSRF) vulnerability in WooCommerce PayPal Payments plugin <= 2.0.4 versions

Description

Cross-Site Request Forgery (CSRF) vulnerability in WooCommerce PayPal Payments plugin <= 2.0.4 versions.

Affected products and versions

Product	Affected versions	Fixed in
WooCommerce PayPal Payments 2.0	earliest → 2.0.4	No fix stated

Other CVEs of WooCommerce PayPal Payments

The 3 CVEs of WooCommerce PayPal Payments →

CVE-2025-14073 The WooCommerce PayPal Payments plugin for WordPress is vulnerable to Sensitive Information Disclosure due to an… 5.3 Medium CVE-2026-9284 The WooCommerce PayPal Payments plugin for WordPress is vulnerable to unauthorized order manipulation and information… 8.2 High