Cross-Site Request Forgery in USB Qr Code Scanner for WooCommerce by WordPress

CVE-2025-12588

What is CVE-2025-12588?

The USB Qr Code Scanner For WooCommerce plugin for WordPress is affected by a vulnerability that allows unauthenticated attackers to exploit missing nonce validation on the settings page. This issue enables attackers to manipulate plugin settings by tricking an administrator into executing a malicious request, thus undermining the integrity of the application. Immediate action is recommended to mitigate potential risks.

References