Live Shopping Video Streams Vulnerabilities

The Live Shopping & Shoppable Videos For WooCommerce plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in versions up to, and including, 2.2.0. This makes it possible for unauthenticated attackers to perform an unauthorized action.

CVSS:

5.3

Affected:

up to 2.2.0

Fix:

No patched version reported

Disclosed:

Dec 31, 2025

CVE-2025-62081 on NVD →

The Live Shopping & Shoppable Videos For WooCommerce plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.2.0. This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated attackers to perform an unauthorized action via a...

CVSS:

4.3

Affected:

up to 2.2.0

Fixed in:

2.2.1

Disclosed:

Dec 31, 2025

CVE-2025-62080 on NVD →