CVE-2025-32241
CVSS 3.1 Score 6.5 of 10 (medium)
Details
Published Apr 4, 2025
Updated: Apr 7, 2025
CWE ID 352
Summary
CVE-2025-32241 is a Cross-Site Request Forgery (CSRF) vulnerability affecting the CleverReach® Official CleverReach Plugin for WooCommerce. This issue permits unauthorized users to make malicious requests on behalf of other users, potentially leading to data manipulation or unintended actions on the affected WooCommerce sites. The vulnerability exists in the plugin from version n/a up to and including 3.4.3, and users are urged to update to a patched version to mitigate the risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.