cleantalk
Vulnerabilities and Security Researches

Woocommerce Notify Updated Product, CVE-2025-58856

CVE, Research URL

CVE-2025-58856

Published on
Sep 05, 2025
Research Description
Cross-Site Request Forgery (CSRF) vulnerability in ablancodev Woocommerce Notify Updated Product allows Stored XSS. This issue affects Woocommerce Notify Updated Product: from n/a through 1.6.
Affected versions
Min -, max 1.6.
Status
vulnerable