CVE-2025-31879
CVSS 3.1 Score 5.4 of 10 (medium)
Details
Summary
CVE-2025-31879 is a Missing Authorization vulnerability affecting the Barcode Generator for WooCommerce plugin, developed by Dmitry V. (CEO of "UKR Solution"). This issue arises due to incorrectly configured access control security levels within the plugin. An attacker can exploit this vulnerability and gain unauthorized access to affected WooCommerce installations, with versions ranging from n/a to 2.0.4 being vulnerable. This could potentially lead to sensitive data breaches or further system compromise. It is crucial for users to update their Barcode Generator for WooCommerce plugin to the latest version as soon as possible to mitigate the risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Vendors
- WordPress