cleantalk
Vulnerabilities and Security Researches

Staggs – Product configurator for WooCommerce, CVE-2025-47637

CVE, Research URL

CVE-2025-47637

Home page URL

Security reports for Staggs – Product configurator for WooCommerce

Application

Staggs – Product configurator for WooCommerce

Published on
May 23, 2025
Research Description
Unrestricted Upload of File with Dangerous Type vulnerability in STAGGS STAGGS allows Upload a Web Shell to a Web Server. This issue affects STAGGS: from n/a through 2.11.0.
Affected versions
Min -, max 2.11.0.
Status
vulnerable
Previous vulnerability researches
Bot for Telegram on WooCommerce (CVE-2024-9821) , Oct 14, 2024
Bot for Telegram on WooCommerce (CVE-2025-48268) , May 24, 2025
New vulnerability
4stats (CVE-2025-3869) , May 24, 2025
Verge3D Publishing and E-Commerce (CVE-2025-48241) , May 24, 2025
Staggs – Product configurator for WooCommerce (CVE-2025-47637) , May 24, 2025
Additional Custom Emails for WooCommerce (CVE-2025-48251) , May 24, 2025
WP SMTP (CVE-2025-1123) , May 24, 2025