Reflected XSS Vulnerability in WP Swings Wallet System for WooCommerce

CVE-2025-32530

What is CVE-2025-32530?

The Wallet System for WooCommerce by WP Swings is susceptible to a reflected cross-site scripting (XSS) vulnerability. This issue arises from improper handling of user input during web page generation, enabling an attacker to execute arbitrary scripts in the context of an affected user's session. Users leveraging vulnerable versions of the plugin, particularly from its initial release through version 2.6.5, are at risk. Prompt updates and implementations of proper input validation measures are essential to mitigate these security threats.

References