CVE-2025-22673

Summary

CVE-2025-22673 is a critical vulnerability affecting WPFactory's EAN for WooCommerce plugin. The issue stems from missing authorization controls, which can be exploited by unauthorized users to gain unauthorized access to the system. This vulnerability arises due to incorrectly configured access control security levels. The affected versions of the plugin range from n/a to 5.3.5. Successful exploitation of this flaw could result in significant data loss or system compromise. Users are strongly urged to update their plugin to a patched version as soon as possible to mitigate the risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.