CVE-2025-24553

Summary

CVE-2025-24553 is a Cross-Site Scripting (XSS) vulnerability affecting the Akadrama Shipping with Venipak plugin for WooCommerce. The flaw, which is located in the way input is neutralized during web page generation, permits Reflected XSS attacks. This issue puts at risk any version of the Shipping with Venipak for WooCommerce plugin, from the unspecified initial version up to and including 1.22.3. Successful exploitation could lead to unauthorized script injection and potential data theft or unintended modifications. It's crucial for users to update the plugin as soon as a patch becomes available.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.