Fraudlabs Pro For Woocommerce Vulnerabilities

The FraudLabs Pro for WooCommerce plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in all versions up to, and including, 2.22.11. This makes it possible for unauthenticated attackers to perform an unauthorized action.

CVSS:

5.3

Affected:

up to 2.22.11

Fixed in:

2.22.12

Disclosed:

Jun 5, 2025

CVE-2025-49320 on NVD →

The FraudLabs Pro for WooCommerce plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.22.8. This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated attackers to update settings and inject malicious web scripts vi...

CVSS:

6.1

Affected:

up to 2.22.8

Fixed in:

2.22.9

Disclosed:

Apr 9, 2025

CVE-2025-32659 on NVD →