Trustmate Io Integration For Woocommerce Vulnerabilities

The TrustMate.io – WooCommerce integration plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.14.0. This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated attackers to perform an unauthorized action granted the...

CVSS:

4.3

Affected:

up to 1.14.0

Fix:

No patched version reported

Disclosed:

Sep 5, 2025

CVE-2025-58802 on NVD →

The TrustMate.io integration for WooCommerce plugin for WordPress is vulnerable to Arbitrary Settings Update via the 'save_checkbox' AJAX action in versions up to, and including, 1.8.11. This makes it possible for authenticated Subscriber+ attackers to update otherwise restricted plugin settings and perform a subsequen...

CVSS:

6.3

Affected:

up to 1.8.11

Fixed in:

1.8.12

Disclosed:

Jan 3, 2022

The TrustMate.io integration for WooCommerce plugin for WordPress is vulnerable to Blog Option Update via the 'save_checkbox' AJAX action in versions up to, and including, 1.8.12. This makes it possible for authenticated Subscriber+ attackers to update the vulnerable site's options.

CVSS:

6.3

Affected:

up to 1.8.11

Fixed in:

1.8.12

Disclosed:

Jan 3, 2022