CVE-2025-68602

MEDIUM NUCLEI

Scott Paterson Accept Donations with PayPal <1.5.1 - Open Redirect

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2025-68602. PoCs published by Sechunt3r. A Nuclei detection template is also available.

AI-analyzed exploit summary This repository contains a functional exploit PoC for CVE-2025-68602, an open redirect vulnerability in the Accept Donations with PayPal & Stripe WordPress plugin. The exploit leverages insufficient validation on the redirect URL parameter, allowing unauthenticated attackers to redirect users to malicious sites.

Description

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Scott Paterson Accept Donations with PayPal & Stripe easy-paypal-donation allows Phishing.This issue affects Accept Donations with PayPal & Stripe: from n/a through <= 1.5.2.

Exploits (1)

github WORKING POC

by Sechunt3r · shellpoc

https://github.com/Sechunt3r/CVE-POCs/tree/main/CVE-2025-68602

View Code ZIP pw:eip

This repository contains a functional exploit PoC for CVE-2025-68602, an open redirect vulnerability in the Accept Donations with PayPal & Stripe WordPress plugin. The exploit leverages insufficient validation on the redirect URL parameter, allowing unauthenticated attackers to redirect users to malicious sites.

Classification

Working Poc 100%

Attack Type

Other

Complexity

Trivial

Reliability

Reliable

Target: Accept Donations with PayPal & Stripe WordPress plugin <= 1.5.2

No auth needed

Prerequisites: WordPress site with vulnerable plugin installed

MITRE ATT&CK

T1190 - Exploit Public-Facing Application

devstral-2 · analyzed Mar 18, 2026 Full analysis →

Nuclei Templates (1)

Accept Donations with PayPal <= 1.5.2 - Open Redirect

MEDIUMVERIFIEDby Shivam Kamboj

References (1)

Core 1

Core References

Third Party Advisory vdb-entry

https://patchstack.com/database/Wordpress/Plugin/easy-paypal-donation/vulnerability/wordpress-accept-donations-with-paypal-plugin-1-5-1-open-redirection-vulnerability?_s_id=cve

Scores

CVSS v3 4.7

EPSS 0.0013

EPSS Percentile 31.9%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-601

Status published

Products (2)

Scott Paterson/Accept Donations with PayPal < <= 1.5.1

Scott Paterson/Accept Donations with PayPal & Stripe < 1.5.2

Published Dec 24, 2025

Tracked Since Feb 18, 2026