CyberAlerts is shutting down on June 30th, 2025. Thank you for your support!

CVE-2025-47463: WordPress Stock Locations for WooCommerce <= 2.8.6 - Broken Access Control Vulnerability

7.1 CVSS

Description

Missing Authorization vulnerability in Fahad Mahmood Stock Locations for WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Stock Locations for WooCommerce: from n/a through 2.8.6.

Classification

CVE ID: CVE-2025-47463

CVSS Base Severity: HIGH

CVSS Base Score: 7.1

CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H

Problem Types

CWE-862 Missing Authorization

Affected Products

Vendor: Fahad Mahmood

Product: Stock Locations for WooCommerce

Exploit Prediction Scoring System (EPSS)

EPSS Score: 0.04% (probability of being exploited)

EPSS Percentile: 11.83% (scored less or equal to compared to others)

EPSS Date: 2025-06-15 (when was this score calculated)

References

https://nvd.nist.gov/vuln/detail/CVE-2025-47463
https://patchstack.com/database/wordpress/plugin/stock-locations-for-woocommerce/vulnerability/wordpress-stock-locations-for-woocommerce-2-8-6-broken-access-control-vulnerability?_s_id=cve

Timeline