CVE-2025-32514

CVE-2025-32514 is a Reflected XSS in the WordPress plugin “WooCommerce Estimate and Quote” (WC Estimate and Quote) affecting versions up to 1.0.2.5. The root cause is improper neutralization of user input during web page generation. The vulnerability could allow an attacker to inject and execute ...

CVE-2025-32514 WordPress WooCommerce Estimate and Quote plugin <= 1.0.2.5 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in cscode WooCommerce Estimate and Quote wc-estimate-and-quote allows Reflected XSS.This issue affects WooCommerce Estimate and Quote: from n/a through = 1.0.2.5...

CVE-2025-32522 WordPress License Manager for WooCommerce plugin <= 3.0.9 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPExperts.io License Manager for WooCommerce allows Reflected XSS. This issue affects License Manager for WooCommerce: from n/a through 3.0.9...

CVE-2025-32530 WordPress Wallet System for WooCommerce plugin <= 2.6.8 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Swings Wallet System for WooCommerce wallet-system-for-woocommerce allows Reflected XSS.This issue affects Wallet System for WooCommerce: from n/a through = 2.6.8...

CVE-2025-32530 WordPress Wallet System for WooCommerce plugin <= 2.6.5 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Swings Wallet System for WooCommerce allows Reflected XSS. This issue affects Wallet System for WooCommerce: from n/a through 2.6.5...

CVE-2025-32530

CVE-2025-32530 describes a Reflected XSS in the WordPress plugin “Wallet System for WooCommerce.” The issue is attributed to improper neutralization of input during web page generation and affects Wallet System for WooCommerce versions up to 2.6.5 (range: from n/a through 2.6.5). The connected Re...

CVE-2025-32533

CVE-2025-32533 is a reflected XSS in the WordPress plugin Deliver via Shipos for WooCommerce (Deliver via Shipos for WooCommerce) affecting 2.1.7 and earlier. Root cause: improper neutralization of input during web page generation. Public references (NVD/Red Hat/Wordfence) confirm it as a valid i...

CVE-2025-32535 WordPress DN Shipping by Weight for WooCommerce Plugin <= 1.2 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in digireturn DN Shipping by Weight for WooCommerce dn-shipping-by-weight allows Reflected XSS.This issue affects DN Shipping by Weight for WooCommerce: from n/a through = 1.2...

CVE-2025-32535 WordPress DN Shipping by Weight for WooCommerce Plugin <= 1.2 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in digireturn DN Shipping by Weight for WooCommerce allows Reflected XSS. This issue affects DN Shipping by Weight for WooCommerce: from n/a through 1.2...

CVE-2025-32544 WordPress WooCommerce Loyal Customers plugin <= 2.6 - Broken Access Control vulnerability

Missing Authorization vulnerability in The Right Software WooCommerce Loyal Customers allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects WooCommerce Loyal Customers: from n/a through 2.6...

CVE-2025-32545 WordPress WooCommerce Products without featured images Plugin <= 0.1 - CSRF to Reflected Cross Site Scripting (XSS) vulnerability

Cross-Site Request Forgery CSRF vulnerability in SOFTAGON WooCommerce Products without featured images woocommerce-products-without-featured-images allows Reflected XSS.This issue affects WooCommerce Products without featured images: from n/a through = 0.1...

CVE-2025-32545 WordPress WooCommerce Products without featured images Plugin <= 0.1 - CSRF to Reflected Cross Site Scripting (XSS) vulnerability

Cross-Site Request Forgery CSRF vulnerability in SOFTAGON WooCommerce Products without featured images woocommerce-products-without-featured-images allows Reflected XSS.This issue affects WooCommerce Products without featured images: from n/a through = 0.1...

CVE-2025-32544

CVE-2025-32544 is a Missing Authorization vulnerability in the WooCommerce Loyal Customers plugin (WordPress) affecting versions up to 2.6. The CVE entry states that access to functionality is not properly constrained by ACLs, enabling improper access. CVSSv3.1 vector: AV:N/AC:L/PR:N/UI:N/S:U/C:H...

CVE-2025-32544 WordPress WooCommerce Loyal Customers plugin <= 2.6 - Broken Access Control vulnerability

Missing Authorization vulnerability in The Right Software WooCommerce Loyal Customers woocommerce-loyal-customer allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WooCommerce Loyal Customers: from n/a through = 2.6...

CVE-2025-32545

CVE-2025-32545 describes a CSRF to Reflected XSS vulnerability in the WordPress plugin for WooCommerce products without featured images (SOFTAGON). Affected version range is n/a through 0.1. The report attributes the issue to a cross-site request forgery flow that enables reflected JavaScript exe...

CVE-2025-32552 WordPress MSRP (RRP) Pricing for WooCommerce Plugin <= 1.8.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPFactory MSRP RRP Pricing for WooCommerce msrp-for-woocommerce allows Reflected XSS.This issue affects MSRP RRP Pricing for WooCommerce: from n/a through = 1.8.1...

CVE-2025-32552 WordPress MSRP (RRP) Pricing for WooCommerce Plugin <= 1.8.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPFactory MSRP RRP Pricing for WooCommerce allows Reflected XSS. This issue affects MSRP RRP Pricing for WooCommerce: from n/a through 1.8.1...

CVE-2025-32552

CVE-2025-32552 – Reflected Cross-Site Scripting in MSRP (RRP) Pricing for WooCommerce. Affected: MSRP (RRP) Pricing for WooCommerce

CVE-2025-32593 WordPress Add Product Frontend for WooCommerce plugin <= 1.0.8 - Arbitrary Content Deletion vulnerability

Missing Authorization vulnerability in Bytes Technolab Add Product Frontend for WooCommerce add-product-frontend-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Add Product Frontend for WooCommerce: from n/a through = 1.0.8...

CVE-2025-32593

CVE-2025-32593 is a Missing Authorization vulnerability in the WordPress plugin Add Product Frontend for WooCommerce (affected: all versions up to 1.0.6) that allows unauthenticated arbitrary content deletion due to improperly configured access control. This CVE entry appears in multiple sources ...