CVE-2025-15484

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2025-15484", "assignerOrgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", "state": "PUBLISHED", "assignerShortName": "WPScan", "dateReserved": "2026-01-07T22:08:07.507Z", "datePublished": "2026-04-01T06:00:05.052Z", "dateUpdated": "2026-04-01T14:03:41.137Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", "shortName": "WPScan", "dateUpdated": "2026-04-01T06:00:05.052Z"}, "title": "Order Notification for WooCommerce < 3.6.3 - Unauthenticated WooCommerce REST Permission Bypass", "problemTypes": [{"descriptions": [{"description": "CWE-287 Improper Authentication", "lang": "en", "type": "CWE"}]}], "affected": [{"vendor": "Unknown", "product": "Order Notification for WooCommerce", "versions": [{"status": "affected", "versionType": "semver", "version": "0", "lessThan": "3.6.3"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "The Order Notification for WooCommerce WordPress plugin before 3.6.3 overrides WooCommerce's permission checks to grant full access to all unauthenticated requests, enabling complete read/write access to store resources like products, coupons, and customers."}], "references": [{"url": "https://wpscan.com/vulnerability/ee9f1c0c-86bb-4922-9eb5-8aae78003eff/", "tags": ["exploit", "vdb-entry", "technical-description"]}], "credits": [{"lang": "en", "value": "Khaled Alenazi (Nxploited)", "type": "finder"}, {"lang": "en", "value": "WPScan", "type": "coordinator"}], "source": {"discovery": "EXTERNAL"}, "x_generator": {"engine": "WPScan CVE Generator"}}, "adp": [{"problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-287", "lang": "en", "description": "CWE-287 Improper Authentication"}]}], "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.1, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"timestamp": "2026-04-01T14:03:37.652116Z", "id": "CVE-2025-15484", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-04-01T14:03:41.137Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.1, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2025-15484", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-04-01T14:03:37.652116Z"}}}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-287", "description": "CWE-287 Improper Authentication"}]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-04-01T14:03:25.608Z"}}], "cna": {"title": "Order Notification for WooCommerce < 3.6.3 - Unauthenticated WooCommerce REST Permission Bypass", "source": {"discovery": "EXTERNAL"}, "credits": [{"lang": "en", "type": "finder", "value": "Khaled Alenazi (Nxploited)"}, {"lang": "en", "type": "coordinator", "value": "WPScan"}], "affected": [{"vendor": "Unknown", "product": "Order Notification for WooCommerce", "versions": [{"status": "affected", "version": "0", "lessThan": "3.6.3", "versionType": "semver"}], "defaultStatus": "unaffected"}], "references": [{"url": "https://wpscan.com/vulnerability/ee9f1c0c-86bb-4922-9eb5-8aae78003eff/", "tags": ["exploit", "vdb-entry", "technical-description"]}], "x_generator": {"engine": "WPScan CVE Generator"}, "descriptions": [{"lang": "en", "value": "The Order Notification for WooCommerce WordPress plugin before 3.6.3 overrides WooCommerce's permission checks to grant full access to all unauthenticated requests, enabling complete read/write access to store resources like products, coupons, and customers."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "description": "CWE-287 Improper Authentication"}]}], "providerMetadata": {"orgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", "shortName": "WPScan", "dateUpdated": "2026-04-01T06:00:05.052Z"}}}, "cveMetadata": {"cveId": "CVE-2025-15484", "state": "PUBLISHED", "dateUpdated": "2026-04-01T14:03:41.137Z", "dateReserved": "2026-01-07T22:08:07.507Z", "assignerOrgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", "datePublished": "2026-04-01T06:00:05.052Z", "assignerShortName": "WPScan"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Order Notification for WooCommerce", "vendor": "Unknown", "versions": [{"lessThan": "3.6.3", "status": "affected", "version": "0", "versionType": "semver"}]}], "source": "contact@wpscan.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "The Order Notification for WooCommerce WordPress plugin before 3.6.3 overrides WooCommerce's permission checks to grant full access to all unauthenticated requests, enabling complete read/write access to store resources like products, coupons, and customers."}, {"lang": "es", "value": "El plugin de WordPress Order Notification for WooCommerce anterior a la versi\u00f3n 3.6.3 anula las comprobaciones de permisos de WooCommerce para conceder acceso total a todas las solicitudes no autenticadas, lo que permite un acceso completo de lectura/escritura a recursos de la tienda como productos, cupones y clientes."}], "id": "CVE-2025-15484", "lastModified": "2026-10-07T09:10:00.160", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 9.1, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 5.2, "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-15484", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2026-04-01T14:03:37.652116Z", "version": "2.0.3"}}]}, "published": "2026-04-01T06:16:14.133", "references": [{"source": "contact@wpscan.com", "url": "https://wpscan.com/vulnerability/ee9f1c0c-86bb-4922-9eb5-8aae78003eff/"}], "sourceIdentifier": "contact@wpscan.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-287"}], "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[0,3.6.3)"}}], "enrichment": {"confidence": 80.0, "confidence_source": "inferred", "scores": [{"score": 80.0, "source": "inferred"}]}, "product": "order_notification_for_woocommerce", "vendor": "order_notification_for_woocommerce"}, {"configurations": [{"platform": null, "status": "unaffected", "versions": null}], "enrichment": {"confidence": 80.0, "confidence_source": "inferred", "scores": [{"score": 80.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "product": "wordpress", "vendor": "wordpress"}], "analysis": {"en": {"generated_at": "2026-04-02T02:51:31.055301+00:00", "value": {"mitigation_remediation": ["Update the Order Notification for WooCommerce plugin to version 3.6.3 or later.", "If an immediate update is not possible, deactivate the plugin to block the bypassed permission checks.", "After update or deactivation, verify that WooCommerce REST API endpoints enforce authentication and consider restricting API access to trusted IP ranges."], "summary": {"action": "Immediate Patch", "impact": "Unauthenticated REST API permission bypass"}, "threat_synthesis": {"affected_systems": "All installations of the Order Notification for WooCommerce WordPress plugin with versions earlier than 3.6.3 are affected. Site owners running these legacy plugin versions rely on the plugin\u2019s notification features, which in turn replace WooCommerce\u2019s default permission logic for REST endpoints.", "description_and_impact": "The Order Notification for WooCommerce plugin before version 3.6.3 alters WooCommerce\u2019s built\u2011in permission checks, allowing attackers to use the REST API without any credentials. This flaw grants complete read and write access to store resources such as products, coupons, and customer data, effectively giving an unauthenticated user full administrative control over the e\u2011commerce site.", "risk_and_exploitability": "The CVSS score of 9.1 classifies this as a critical vulnerability, but its EPSS score of less than 1% indicates a low current exploitation likelihood. The flaw is not listed in the CISA KEV catalog. Attackers can exploit the vulnerability by issuing unauthenticated REST requests to endpoints such as /wp-json/wc/v3/products or /wp-json/wc/v3/customers, achieving full CRUD capability on the store."}}}}, "created": "2026-04-02T07:49:53.977476+00:00", "updated": "2026-04-03T08:58:47.030881+00:00", "vendors": ["order_notification_for_woocommerce", "order_notification_for_woocommerce$PRODUCT$order_notification_for_woocommerce", "wordpress", "wordpress$PRODUCT$wordpress"]}