A vulnerability labeled as problematic has been found in hayyatapps Sell BTC Plugin up to 1.5 on WordPress. This affects the function
orderform_data of the component Orders Page. The manipulation results in cross site scripting.
This vulnerability is identified as CVE-2025-14554. The attack can be executed remotely. There is not any exploit available.
The affected component should be upgraded.
