cleantalk
Vulnerabilities and Security Researches

WPC Smart Messages for WooCommerce, CVE-2025-62903

CVE, Research URL

CVE-2025-62903

Home page URL

Security reports for WPC Smart Messages for WooCommerce

Application

WPC Smart Messages for WooCommerce

Published on
Oct 27, 2025
Research Description
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPClever WPC Smart Messages for WooCommerce wpc-smart-messages allows Stored XSS.This issue affects WPC Smart Messages for WooCommerce: from n/a through <= 4.2.4.
Affected versions
max 4.2.4.
Status
vulnerable
Previous vulnerability researches
Welcart e-Commerce (CVE-2025-10651) , Nov 10, 2025
Welcart e-Commerce (CVE-2025-54013) , Jul 19, 2025
Welcart e-Commerce (CVE-2025-10649) , Nov 10, 2025
Welcart e-Commerce (CVE-2023-43493) , Jun 10, 2024
Welcart e-Commerce (CVE-2023-43610) , Jun 10, 2024
New vulnerability
Custom Post Type Attachment (CVE-2025-62907) , Nov 11, 2025
Finale Lite &#8211; Sales Countdown Timer &amp; Discount for WooCommerce (CVE-2025-52736) , Nov 11, 2025
APPExperts &#8211; Mobile App Builder for WordPress | WooCommerce to iOS and Android Apps (CVE-2025-53218) , Nov 11, 2025
Recipe Card Blocks for Gutenberg &amp; Elementor &#8211; Best WordPress Recipe Plugin (CVE-2025-62019) , Nov 11, 2025
Premmerce Product Search for WooCommerce (CVE-2025-64289) , Nov 11, 2025