CVE-2025-31087
CVSS 3.1 Score 9.8 of 10 (high)
Details
Published Apr 1, 2025
CWE ID 502
Summary
CVE-2025-31087 is a deserialization vulnerability affecting Multiple Shipping And Billing Address For Woocommerce, a plugin used in WooCommerce stores. The flaw, specifically a Object Injection issue, allows untrusted data to be deserialized, potentially leading to code execution with administrative privileges. This can result in attackers gaining control of the affected system, posing a serious security risk to WooCommerce stores using the plugin from version n/a through 1.5.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.