A vulnerability categorized as critical has been discovered in Payment Button for PayPal Plugin up to 1.2.3.41 on WordPress. This affects the function wppaypalcheckout_ajax_process_order of the component AJAX Endpoint. The manipulation results in missing authorization.

This vulnerability is known as CVE-2025-14463. It is possible to launch the attack remotely. No exploit is available.