Public exploit available
Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-2025-68602 — Open Redirect in Paterson Accept Donations With Paypal Stripe

CWE-601 — Open Redirect5 documents5 sources
Severity
6.1MEDIUMNVD
EPSS
1.4%
top 19.25%
CISA KEV
Not in KEV
Exploit
PoC available
Public exploit / PoC exists
Affected products
1
Scott Paterson Accept Donations With Paypal Stripe
Timeline
PublishedDec 24

Description

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Scott Paterson Accept Donations with PayPal & Stripe easy-paypal-donation allows Phishing.This issue affects Accept Donations with PayPal & Stripe: from n/a through <= 1.5.2.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:NExploitability: 2.8 | Impact: 2.7

Affected Packages1 packages

🔴Vulnerability Details

2
CVEList
WordPress Accept Donations with PayPal plugin <= 1.5.2 - Open Redirection vulnerability↗2025-12-24
▶
GHSA
GHSA-2h6j-3v9m-2v47: URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Scott Paterson Accept Donations with PayPal easy-paypal-donation allows Phishing↗2025-12-24
▶

💥Exploits & PoCs

1
Nuclei
Accept Donations with PayPal <= 1.5.2 - Open Redirect
▶

🕵️Threat Intelligence

1
Wiz
CVE-2025-68602 Impact, Exploitability, and Mitigation Steps | Wiz↗
▶
CVE-2025-68602 — Open Redirect | cvebase