CVE-2025-26875
CVSS 3.1 Score 9.3 of 10 (high)
Details
Published Mar 15, 2025
CWE ID 89
Summary
CVE-2025-26875 is a vulnerability affecting Multiple Shipping And Billing Address For Woocommerce, a plugin used in WooCommerce sites. The issue involves improper neutralization of special elements in SQL commands, allowing SQL Injection. An attacker can exploit this vulnerability to gain unauthorized access to sensitive data or perform malicious actions on the affected system. This issue affects versions 1.3 and below of the plugin, making it essential for users to apply the necessary patches or updates to mitigate the risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.