CVE-2025-30781
CVSS 3.1 Score 4.7 of 10 (medium)
Details
Published Mar 27, 2025
CWE ID 601
Summary
CVE-2025-30781 is a URL redirection vulnerability affecting the Scheduled & Automatic Order Status Controller for WooCommerce, from versions n/a through 3.7.1. An attacker can exploit this Open Redirect issue to redirect users to phishing sites, potentially leading to data theft or unauthorized access. The flaw enables an attacker to manipulate URLs, putting WooCommerce users at risk. It is essential to update the plugin to a patched version to mitigate this security threat.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Vendors
- WordPress