CVE-2025-31807

Summary

CVE-2025-31807 is a Cross-Site Request Forgery (CSRF) vulnerability affecting Product Notices for WooCommerce, from version n/a through 1.3.3. An attacker can exploit this issue by crafting a malicious request that is sent to an unsuspecting user, potentially allowing the attacker to perform unauthorized actions on the affected system. This could include adding, updating, or deleting Product Notices without the user's knowledge or consent. This vulnerability poses a serious risk to websites using Product Notices for WooCommerce and should be addressed promptly by updating to the latest version of the plugin to mitigate the CSRF threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.