CVE-2025-30923

Summary

CVE-2025-30923 is a Cross-Site Request Forgery (CSRF) vulnerability affecting the Gift Message plugin for WooCommerce. This issue permits attackers to manipulate user actions on a vulnerable website, potentially leading to unauthorized modifications or theft of sensitive information. Specifically, the vulnerability exists in the Gift Message plugin, impacting versions from n/a through 1.7.8. To exploit this weakness, an attacker would need to trick a user into clicking a maliciously crafted link or form, thereby executing unintended actions on the affected website. To mitigate this risk, it is recommended that users install the latest available patch or upgrade to a version of the plugin that is no longer susceptible to this CSRF vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.