CVE-2025-58917

🗓️ 26 Sep 2025 08:31:11Reported by PatchstackType

CVE-2025-58917 is a Stored XSS in WordPress Quantities and Units for WooCommerce plugin up to 1.0.13.

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2025-58917	29 Sep 202517:01	–	circl
CNNVD	WordPress plugin Quantities and Units for WooCommerce 跨站脚本漏洞	26 Sep 202500:00	–	cnnvd
Cvelist	CVE-2025-58917 WordPress Quantities and Units for WooCommerce plugin <= 1.0.13 - Cross Site Scripting (XSS) vulnerability	26 Sep 202508:31	–	cvelist
EUVD	EUVD-2025-31315	3 Oct 202520:07	–	euvd
NVD	CVE-2025-58917	26 Sep 202509:15	–	nvd
Patchstack	WordPress Quantities and Units for WooCommerce plugin <= 1.0.13 - Cross Site Scripting (XSS) vulnerability	17 Sep 202516:49	–	patchstack
Positive Technologies	PT-2025-39532	26 Sep 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-58917	27 Sep 202508:44	–	redhatcve
Vulnrichment	CVE-2025-58917 WordPress Quantities and Units for WooCommerce plugin <= 1.0.13 - Cross Site Scripting (XSS) vulnerability	26 Sep 202508:31	–	vulnrichment
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (September 15, 2025 to September 21, 2025)	25 Sep 202514:54	–	wordfence

Vulners

Node

nick_verwymeren quantities_and_units_for_woocommerceRange≤1.0.13wordpress

[
  {
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "quantities-and-units-for-woocommerce",
    "product": "Quantities and Units for WooCommerce",
    "vendor": "Nick Verwymeren",
    "versions": [
      {
        "lessThanOrEqual": "1.0.13",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
patchstack	www.patchstack.com/database/Wordpress/Plugin/quantities-and-units-for-woocommerce/vulnerability/wordpress-quantities-and-units-for-woocommerce-plugin-1-0-13-cross-site-scripting-xss-vulnerability

28 Apr 2026 16:13Current

5.9Medium risk

Vulners AI Score5.9

CVSS 3.16.5

EPSS0.00186

SSVC

CWE-79