CVE-2025-22318
CVSS 3.1 Score 7.5 of 10 (high)
Details
Published Jan 21, 2025
CWE ID 862
Summary
CVE-2025-22318 is a Missing Authorization vulnerability affecting the Standard Box Sizes – for WooCommerce plugin for WooCommerce. This issue, present in versions from n/a through 1.6.13, allows unauthorized users to modify or delete box sizes, potentially disrupting e-commerce operations and leading to incorrect order fulfillment. This vulnerability underscores the importance of keeping plugins updated to ensure the security of your WooCommerce store.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.