CVE-2025-9322

Name of the Vulnerable Software and Affected Versions Stripe Payment Forms by WP Full Pay – Accept Credit Card Payments, Donations & Subscriptions plugin for WordPress versions up to and including 8.3.1

Description The Stripe Payment Forms plugin for WordPress is susceptible to SQL Injection due to inadequate input validation and query preparation. Specifically, the wpfs-form-name parameter is not properly sanitized, allowing attackers to inject malicious SQL code. This could enable unauthorized access to sensitive database information.

Recommendations Update the Stripe Payment Forms by WP Full Pay – Accept Credit Card Payments, Donations & Subscriptions plugin to a version later than 8.3.1.