CVE-2025-1303

The Plugin Oficial – Getnet para WooCommerce WordPress plugin is vulnerable to Reflected Cross-Site Scripting (XSS) in all versions up to and including 1.8.0 (specifically identified in versions through 1.7.3 ). The root cause is the insufficient sanitization and escaping of the 'page' parameter ...

CVE-2025-1289

The Plugin Oficial – Getnet para WooCommerce WordPress plugin, in versions up to and including 1.7.3 , is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is the failure to properly sanitise and escape certain plugin settings. This vulnerability allows high-privilege users, such a...