CVE-2025-31022

—

CVSS 3.1

9.8 critical

EPSS

<1%p53

Published

Jun 9, 2025 (Jun 9, 2025)

Modified

Jun 17, 2026

Description

Authentication Bypass Using an Alternate Path or Channel vulnerability in PayU India PayU India payu-india allows Authentication Abuse.This issue affects PayU India: from n/a through < 3.8.8.

Ecosystems: WordPress
Weakness: CWE-288
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.7%)

In the news3 stories

⚡ Weekly Recap: iPhone Spyware, Microsoft 0-Day, TokenBreak Hack, AI Data Leaks and More

The Hacker NewsOct 28, 08:29 UTC · Oct 28, 2025Malware in the wildCVE-2025-43200 CVE-2025-32711 CVE-2025-33053+24 CVEs2

CISA Adds Erlang SSH and Roundcube Flaws to Known Exploited Vulnerabilities Catalog

The Hacker NewsJun 12, 05:02 UTC · Jun 12, 2025Exploit / PoC in the wildCVE-2025-32433 CVE-2024-42009 CVE-2025-31022

PayU Plugin Flaw Allows Account Takeover on 5000 WordPress Sites

Infosecurity MagazineJun 9, 16:45 UTC · Jun 9, 2025Vulnerability CVE-2025-31022