Missing Authorization in Hide Category by User Role for WooCommerce Plugin

CVE-2025-13441

What is CVE-2025-13441?

The Hide Category by User Role for WooCommerce plugin for WordPress contains a vulnerability that allows unauthenticated users to exploit a missing capability check during the admin initialization process. This can enable malicious actors to flush the site's object cache through crafted requests, which may lead to degraded site performance and potential disruptions in service. All versions up to and including 2.3.1 are affected.

References