Skip to content
OpenAdvisories

Product · Sylius

PayPalPlugin

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.5
    CVE-2025-30152

    Sylius PayPal Plugin has an Order Manipulation Vulnerability after PayPal Checkout

    The Syliud PayPal Plugin is the Sylius Core Team’s plugin for the PayPal Commerce Platform. Prior to 1.6.2, 1.7.2, and 2.0.2, a discovered vulnerability allows users to modify their shopping cart after completing the PayPal Checkout process and payment author…

    Sylius PayPalPlugin sylius/paypal-plugin Packagist
  • Medium 6.5
    CVE-2025-29788

    Sylius PayPal Plugin Payment Amount Manipulation Vulnerability

    The Syliud PayPal Plugin is the Sylius Core Team’s plugin for the PayPal Commerce Platform. A vulnerability in versions prior to 1.6.1, 1.7.1, and 2.0.1 allows users to manipulate the final payment amount processed by PayPal. If a user modifies the item quant…

    Sylius PayPalPlugin sylius/paypal-plugin Packagist