CVE-2025-49042 | Automattic WooCommerce Plugin up to 10.0.2 on WordPress cross site scripting

A vulnerability, which was classified as problematic, was found in Automattic WooCommerce Plugin up to 10.0.2 on WordPress. This affects an unknown function. The manipulation results in cross site scripting.

This vulnerability is known as CVE-2025-49042. It is possible to launch the attack remotely. No exploit is available.VulDB Recent EntriesRead More