Cross-Site Scripting Vulnerability in Genetech Products Web and WooCommerce Addons for WPBakery Builder
CVE-2025-62748
Key Information:
- Vendor
WordPress
- Vendor
- CVE Published:
- 31 December 2025
What is CVE-2025-62748?
A security vulnerability has been identified in Genetech Products Web and WooCommerce Addons for WPBakery Builder. This issue arises from improper neutralization of input during web page generation, resulting in a DOM-Based XSS vulnerability. Attackers can exploit this flaw to execute arbitrary scripts in the context of users' browsers, leading to potential data theft, session hijacking, and other malicious activities. Users of versions from n/a through 1.5 should take immediate action to mitigate the risks associated with this vulnerability.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
Web and WooCommerce Addons for WPBakery Builder <= 1.5
References
CVSS V3.1
Timeline
Vulnerability published
Vulnerability Reserved