CVE-2025-50902: Old-Peanut Open-Shop

High severity, CVSS 8.8. EPSS: 0.2% chance of exploitation in the next 30 days.

Cross Site Request Forgery (CSRF) vulnerability in old-peanut Open-Shop (aka old-peanut/wechat_applet__open_source) thru 1.0.0 allows attackers to gain sensitive information via crafted HTTP Post message.

Affected products

• Old-Peanut Open-Shop: up to and including 1.0.0

Published 2025-08-20. Last modified 2026-06-17.