Stored Cross-site Scripting Vulnerability in Wishlist for WooCommerce by WPFactory

CVE-2025-69334

What is CVE-2025-69334?

A cross-site scripting (XSS) vulnerability in the Wishlist for WooCommerce plugin by WPFactory allows attackers to inject malicious scripts into web pages. This vulnerability is particularly critical as it can enable stored XSS, where the script is stored and executed whenever users access the page. Attackers can exploit this flaw to execute arbitrary scripts in the context of a user's session, potentially leading to data theft or unauthorized actions on the website. It affects versions of Wishlist for WooCommerce up to 3.3.0, highlighting the need for immediate updates to secure affected installations.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References