CVE-2021-25085

MEDIO 6.1CVE-2021-25085 · Published 01/02/2022 · updated 17/06/2026

In breve

CVE-2021-25085 è una vulnerabilità MEDIO (CVSS 6.1) che riguarda woocommerce products filter (pluginus).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 1.7%, superiore al 76.5% delle vulnerabilità.
Correzione: aggiornare a 1.2.6.3 o successiva.

Package	Affected versions	Patched versions
woocommerce products filter pluginus	`< 1.2.6.3`	`1.2.6.3`

Description

The WOOF WordPress plugin before 1.2.6.3 does not sanitise and escape the woof_redraw_elements before outputing back in an admin page, leading to a Reflected Cross-Site Scripting

References

plugins.trac.wordpress.org/changeset/2648751 · Patch
wpscan.com/vulnerability/b7dd81c6-6af1-4976-b928-421ca69bfa90 · Exploit

Altre vulnerabilità di woocommerce products filter

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free