Missing Authorization in Cart Weight for WooCommerce Plugin from WordPress Vendor

CVE-2025-66109

What is CVE-2025-66109?

A missing authorization vulnerability exists in the Cart Weight for WooCommerce plugin, affecting versions up to 1.9.11. This flaw allows unauthorized access due to incorrectly configured access control security levels. Attackers could exploit this vulnerability to manipulate functions that should be restricted, potentially compromising the integrity of the e-commerce site and its customer data. It is essential for administrators to upgrade to a patched version and review their security configurations to mitigate these risks.

References