Reflected Cross-Site Scripting Vulnerability in Premmerce WooCommerce Customers Manager for WordPress

CVE-2025-13369

What is CVE-2025-13369?

The Premmerce WooCommerce Customers Manager plugin for WordPress has a vulnerability that allows unauthenticated attackers to exploit reflected Cross-Site Scripting (XSS) attacks. This issue arises from insufficient sanitization of user inputs through parameters such as 'money_spent_from', 'money_spent_to', 'registered_from', and 'registered_to'. By tricking an administrator into performing a malicious action, an attacker can inject arbitrary web scripts, compromising the integrity of the website and potentially leading to unauthorized access or data manipulation. Users are advised to immediately review their plugin versions and apply necessary updates to mitigate risks.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References