Cross-Site Request Forgery Vulnerability in Anton Bond Additional Order Filters for WooCommerce
CVE-2025-53271

7.1HIGH

Key Information:

Vendor

WordPress
Status
Additional Order Filters For WooCommerce
Vendor
CVE Published:
27 June 2025

What is CVE-2025-53271?

A Cross-Site Request Forgery (CSRF) vulnerability in the Anton Bond Additional Order Filters for WooCommerce plugin permits attackers to exploit the system. This weakness allows for Stored Cross-Site Scripting (XSS), potentially compromising user data and site integrity. Affected versions range from n/a to 1.22, necessitating prompt action to update and secure web applications.

Affected Version(s)

Additional Order Filters for WooCommerce <= 1.22

References

https://patchstack.com/database/wordpress/plugin/addition...
vdb-entry

CVSS V3.1

Score:
7.1
Severity:
HIGH
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Skalucy (Patchstack Alliance)
.