CVE-2025-32511

Summary

CVE-2025-32511 is a Cross-Site Scripting (XSS) vulnerability affecting the Excellent Dynamics Make Email Customizer plugin for WooCommerce. The flaw, which permits Reflected XSS attacks, is located in the plugin's web page generation process. This issue can potentially allow attackers to inject malicious scripts into a targeted website, enabling them to steal sensitive data or launch further attacks against unsuspecting users. The vulnerability affects versions of Make Email Customizer for WooCommerce from n/a through 1.0.5. Upgrading to a patched version is strongly advised to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.