« Volver al listado

CVE-2025-15033

Estado: AplazadaMedia (6.5)—

A vulnerability in WooCommerce 8.1 to 10.4.2 can allow logged-in customers to access order data of guest customers on sites with a certain configuration. This has been fixed in WooCommerce 10.4.3, as well as all the previously affected versions through point releases, starting from 8.1, where it has been fixed in 8.1.3. It does not affect WooCommerce 8.0 or earlier.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

⚠ Inferidas por IA a partir de la descripción — NVD aún no ha analizado esta CVE; no son CPE verificados.

Woocommerce — WoocommerceAI

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2025-15033",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2025-15033",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2025-12-22T23:55:39.079754Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 6.5,
          "attackVector": "NETWORK",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 2.8
      }
    ]
  },
  "affected": [
    {
      "source": "contact@wpscan.com",
      "affectedData": [
        {
          "vendor": "Automattic",
          "product": "WooCommerce",
          "versions": [
            {
              "status": "affected",
              "version": "8.1.0",
              "lessThan": "8.1.3",
              "versionType": "semver"
            },
            {
              "status": "affected",
              "version": "8.2.0",
              "lessThan": "8.2.4",
              "versionType": "semver"
            },
            {
              "status": "affected",
              "version": "8.3.0",
              "lessThan": "8.3.3",
              "versionType": "semver"
            },
            {
              "status": "affected",
              "version": "8.4.0",
              "lessThan": "8.4.2",
              "versionType": "semver"
            },
            {
              "status": "affected",
              "version": "8.5.0",
              "lessThan": "8.5.4",
              "versionType": "semver"
            },
            {
              "status": "affected",
              "version": "8.6.0",
              "lessThan": "8.6.3",
              "versionType": "semver"
            },
            {
              "status": "affected",
              "version": "8.7.0",
              "lessThan": "8.7.2",
              "versionType": "semver"
            },
            {
              "status": "affected",
              "version": "8.8.0",
              "lessThan": "8.8.6",
              "versionType": "semver"
            },
            {
              "status": "affected",
              "version": "8.9.0",
              "lessThan": "8.9.4",
              "versionType": "semver"
            },
            {
              "status": "affected",
              "version": "9.0.0",
              "lessThan": "9.0.3",
              "versionType": "semver"
            },
            {
              "status": "affected",
              "version": "9.1.0",
              "lessThan": "9.1.5",
              "versionType": "semver"
            },
            {
              "status": "affected",
              "version": "9.2.0",
              "lessThan": "9.2.4",
              "versionType": "semver"
            },
            {
              "status": "affected",
              "version": "9.3.0",
              "lessThan": "9.3.5",
              "versionType": "semver"
            },
            {
              "status": "affected",
              "version": "9.4.0",
              "lessThan": "9.4.4",
              "versionType": "semver"
            },
            {
              "status": "affected",
              "version": "9.5.0",
              "lessThan": "9.5.3",
              "versionType": "semver"
            },
            {
              "status": "affected",
              "version": "9.6.0",
              "lessThan": "9.6.3",
              "versionType": "semver"
            },
            {
              "status": "affected",
              "version": "9.7.0",
              "lessThan": "9.7.2",
              "versionType": "semver"
            },
            {
              "status": "affected",
              "version": "9.8.0",
              "lessThan": "9.8.6",
              "versionType": "semver"
            },
            {
              "status": "affected",
              "version": "9.9.0",
              "lessThan": "9.9.6",
              "versionType": "semver"
            },
            {
              "status": "affected",
              "version": "10.0.0",
              "lessThan": "10.0.5",
              "versionType": "semver"
            },
            {
              "status": "affected",
              "version": "10.1.0",
              "lessThan": "10.1.3",
              "versionType": "semver"
            },
            {
              "status": "affected",
              "version": "10.2.0",
              "lessThan": "10.2.3",
              "versionType": "semver"
            },
            {
              "status": "affected",
              "version": "10.3.0",
              "lessThan": "10.3.7",
              "versionType": "semver"
            },
            {
              "status": "affected",
              "version": "10.4.0",
              "lessThan": "10.4.3",
              "versionType": "semver"
            }
          ],
          "collectionURL": "https://wordpress.org/plugins",
          "defaultStatus": "unaffected"
        }
      ]
    }
  ],
  "published": "2025-12-22T19:15:48.510",
  "references": [
    {
      "url": "https://wpscan.com/vulnerability/f55fd7d3-7fbe-474f-9406-f47f8aee5e57/",
      "source": "contact@wpscan.com"
    }
  ],
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "description": [
        {
          "lang": "en",
          "value": "CWE-200"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "A vulnerability in WooCommerce 8.1 to 10.4.2 can allow logged-in customers to access order data of guest customers on sites with a certain configuration. This has been fixed in WooCommerce 10.4.3, as well as all the previously affected versions through point releases, starting from 8.1, where it has been fixed in 8.1.3. It does not affect WooCommerce 8.0 or earlier."
    }
  ],
  "lastModified": "2026-06-17T08:36:59.053",
  "sourceIdentifier": "contact@wpscan.com"
}