CVE-2025-32545

Summary

CVE-2025-32545 is a Cross-Site Request Forgery (CSRF) vulnerability affecting WooCommerce Products without featured images. An attacker can exploit this issue to carry out Reflected XSS (Cross-Site Scripting) attacks against unsuspecting users. This vulnerability allows an attacker to inject malicious scripts into web pages viewed by other users, potentially stealing sensitive information or taking control of user sessions. The affected WooCommerce versions range from n/a to 0.1. To mitigate the risk, it is recommended to update to the latest WooCommerce version that includes a patch for this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.