Reflected XSS Vulnerability in URL Shortener by AB Testing

CVE-2025-23789

What is CVE-2025-23789?

A reflected Cross-site Scripting (XSS) vulnerability has been identified in the URL Shortener, Conversion Tracking, and AB Testing plugin for WooCommerce. This flaw allows an attacker to inject malicious scripts into web pages viewed by users. When exploited, it can lead to unauthorized actions on behalf of the user, information theft, and other potential security breaches. Affected versions range from unspecified releases through 9.0.2, emphasizing the need for website administrators to take immediate action to mitigate risks associated with this vulnerability.

References