CVE-2025-27331

Summary

CVE-2025-27331 is a Cross-Site Scripting (XSS) vulnerability affecting WooCommerce Display Products by Tags, with versions from n/a to 1.0.0. Attackers can exploit this issue by injecting malicious scripts into web pages generated by the plugin. The vulnerability occurs due to improper neutralization of user input, allowing the attacker to manipulate the DOM and execute scripts in the context of the affected website, potentially stealing sensitive user data or taking control of the user's session. Users are recommended to update the plugin to the latest version to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.