CVE Daily

CVE-2025-7808

The WP Shopify WordPress plugin before 1.5.4 does not sanitise and escape a para...

Medium CVSS 6.1

Overview

The WP Shopify WordPress plugin before 1.5.4 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin

CWE: N/A Published: 2025-08-14T06:15:28.670
Risk analysis

This vulnerability is rated 🟡 MEDIUM.

  • CVSS: 6.1 (MEDIUM)
  • Detected tags: wordpress, xss (tag impact: MODERATE)

Recommended actions:

  • Apply context-aware output encoding.
  • Enable Content-Security-Policy and HttpOnly/SameSite cookies.

Recommended tools

Tags