CVE-2025-22767

Summary

CVE-2025-22767 is a Cross-site Scripting (XSS) vulnerability affecting the GlobalPayments WooCommerce plugin from undisclosed versions up to and including 1.13.0. An attacker can exploit this issue by injecting malicious scripts into web pages generated by the plugin, potentially gaining unauthorized access to user sessions or stealing sensitive information. The vulnerability stems from insufficient input neutralization, allowing attackers to inject and execute malicious code in the context of a victim's browser. It is essential for users of the GlobalPayments WooCommerce plugin to update to the latest version as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.