CVE-2023-35917

The WooCommerce PayPal Payments plugin prior to version 2.0.5 contains a cross-site request forgery flaw that could enable attackers to trick authenticated users into performing unintended actions while logged in. The vulnerability was discovered by Rafie Muhammad and affects the plugin's ability to properly validate requests, potentially allowing malicious actors to manipulate administrative users. Version 2.0.5 addresses this security issue and should be installed immediately.

Based on public CVE data (MITRE/NVD).