CVE-2025-32514

Summary

CVE-2025-32514 is a Cross-Site Scripting (XSS) vulnerability affecting the WooCommerce Estimate and Quote plugin, version n/a through 1.0.2.5. This issue arises due to improper neutralization of user input during web page generation. An attacker can exploit this vulnerability by injecting malicious scripts into the plugin's Estimate and Quote pages, potentially gaining unauthorized access to user sessions or stealing sensitive data. This could lead to serious security risks for websites using this plugin. Users are strongly advised to update to the latest version of WooCommerce Estimate and Quote to mitigate this threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.