High · 7.1 CVE-2025-47685 EUVD-2025-13722GHSA-wcxf-x2c5-mpc6

WordPress Contribuinte Checkout plugin <= 2.0.03 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability

Published May 7, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Moloni Product: Contribuinte Checkout

Description

Cross-Site Request Forgery (CSRF) vulnerability in Moloni Contribuinte Checkout contribuinte-checkout allows Stored XSS.This issue affects Contribuinte Checkout: from n/a through <= 2.0.03.

Affected products

Vendor	Product	Affected	Fixed
Moloni	Contribuinte Checkout	≤ 2.0.03	—

References

https://patchstack.com/database/Wordpress/Plugin/contribuinte-checkout/vulnerability/wordpress-contribuinte-checkout-plugin-2-0-02-cross-site-request-forgery-csrf-to-stored-xss-vulnerability?_s_id=cve vdb-entry