CVE-2025-31802
CVSS 3.1 Score 5.4 of 10 (medium)
Details
Published Apr 1, 2025
CWE ID 862
Summary
CVE-2025-31802 is a Missing Authorization vulnerability affecting Shiptimize for WooCommerce. This issue arises from incorrectly configured access control security levels within the software. An attacker can exploit this vulnerability to gain unauthorized access, potentially leading to significant security risks. Shiptimize for WooCommerce versions from n/a through 3.1.86 are reportedly susceptible to this problem. It is crucial for users to update their systems to mitigate this vulnerability and ensure their online stores remain protected.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.