cleantalk
Vulnerabilities and Security Researches

Free Shipping Amount Label & Progress Bar for WooCommerce, CVE-2025-48253

CVE, Research URL

CVE-2025-48253

Home page URL

Security reports for Free Shipping Amount Label & Progress Bar for WooCommerce

Application

Free Shipping Amount Label & Progress Bar for WooCommerce

Published on
May 19, 2025
Research Description
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPFactory Free Shipping Bar: Amount Left for Free Shipping for WooCommerce allows Stored XSS. This issue affects Free Shipping Bar: Amount Left for Free Shipping for WooCommerce: from n/a through 2.4.6.
Affected versions
Min -, max 2.4.7.
Status
vulnerable
Previous vulnerability researches
Community Lite Video Chat (12108f2d6b7cdd384ce360bc60e3cf6c2dcb247d) , Jun 06, 2024
Community Lite Video Chat (CVE-2024-49605) , Oct 22, 2024
New vulnerability
bunny.net – WordPress CDN Plugin (CVE-2025-48236) , May 22, 2025
Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder (CVE-2025-48341) , May 21, 2025
Back Button Widget (CVE-2025-48252) , May 21, 2025
Cloudflare Turnstile or reCAPTCHA For All Pages, to Block Spam and Hackers Attack, Block Visitors from China (CVE-2025-48243) , May 21, 2025
Free Shipping Amount Label & Progress Bar for WooCommerce (CVE-2025-48253) , May 21, 2025