WooCommerce Booking Bundle Hours, CVE-2025-58991

CVE, Research URL: CVE-2025-58991
Home page URL: Security reports for WooCommerce Booking Bundle Hours
Application: WooCommerce Booking Bundle Hours
Published on: Sep 09, 2025
Research Description: Cross-Site Request Forgery (CSRF) vulnerability in Cristiano Zanca WooCommerce Booking Bundle Hours allows Stored XSS. This issue affects WooCommerce Booking Bundle Hours: from n/a through 0.7.4.
Affected versions: Min -, max 0.7.5.
Status: vulnerable