CVE-2025-7359

🗓️ 16 Jul 2025 06:40:41Reported by WordfenceType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 23 Views

Vulnerability in Counter live visitors for WooCommerce allows unauthenticated file deletion on server.

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2025-7359	8 Apr 202623:31	–	circl
CNNVD	WordPress plugin Counter live visitors for WooCommerce 路径遍历漏洞	16 Jul 202500:00	–	cnnvd
Cvelist	CVE-2025-7359 Counter live visitors for WooCommerce <= 1.3.6 - Unauthenticated Arbitrary File Deletion in wcvisitor_get_block	16 Jul 202506:40	–	cvelist
EUVD	EUVD-2025-21584	3 Oct 202520:07	–	euvd
NVD	CVE-2025-7359	16 Jul 202507:15	–	nvd
Patchstack	WordPress Counter live visitors for WooCommerce plugin <= 1.3.6 - Unauthenticated Arbitrary File Deletion in wcvisitor_get_block vulnerability	16 Jul 202507:43	–	patchstack
Positive Technologies	PT-2025-29710 · Unknown +1 · Woocommerce +1	16 Jul 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-7359	18 Jul 202507:03	–	redhatcve
Vulnrichment	CVE-2025-7359 Counter live visitors for WooCommerce <= 1.3.6 - Unauthenticated Arbitrary File Deletion in wcvisitor_get_block	16 Jul 202506:40	–	vulnrichment
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (July 14, 2025 to July 20, 2025)	24 Jul 202514:26	–	wordfence

Vulners

Node

danielriera counter_live_visitors_for_woocommerceRange≤1.3.6wordpress

[
  {
    "vendor": "danielriera",
    "product": "Counter live visitors for WooCommerce",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThanOrEqual": "1.3.6",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
plugins	www.plugins.trac.wordpress.org/browser/counter-visitor-for-woocommerce/tags/1.3.6/woo-counter-visitor.php
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/ae13dc61-c4bf-4b17-8055-98c80a853a2a
plugins	www.plugins.trac.wordpress.org/changeset/3333208

15 Apr 2026 00:35Current

6.8Medium risk

Vulners AI Score6.8

CVSS 3.18.2

EPSS0.01391

SSVC

CWE-22