CVE-2021-25077

MEDIUM 6.1CVE-2021-25077 · Published 07/02/2022 · updated 17/06/2026

In short

CVE-2021-25077 is a MEDIUM (CVSS 6.1) vulnerability affecting store toolkit for woocommerce (visser).
Chance of exploitation in the next 30 days (EPSS): 0.88%, higher than 59.1% of all vulnerabilities.
Fix: update to 2.3.2 or later.

Package	Affected versions	Patched versions
store toolkit for woocommerce visser	`< 2.3.2`	`2.3.2`

Description

The Store Toolkit for WooCommerce WordPress plugin before 2.3.2 does not sanitise and escape the tab parameter before outputting it back in an admin page in an error message, leading to a Reflected Cross-Site Scripting

References

plugins.trac.wordpress.org/changeset/2654503 · Patch
wpscan.com/vulnerability/53868650-aba0-4d07-89d2-a998bb0ee5f6 · Exploit

More vulnerabilities in store toolkit for woocommerce

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free