CVE-2025-4212

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2025-4212", "assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "state": "PUBLISHED", "assignerShortName": "Wordfence", "dateReserved": "2025-05-02T11:46:23.557Z", "datePublished": "2025-11-18T09:27:35.729Z", "dateUpdated": "2026-04-08T16:34:33.090Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "shortName": "Wordfence", "dateUpdated": "2026-04-08T16:34:33.090Z"}, "affected": [{"vendor": "wpwham", "product": "Checkout Files Upload for WooCommerce", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "2.2.1", "versionType": "semver"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "The Checkout Files Upload for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via file uploads in all versions up to, and including, 2.2.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in image files that will execute whenever a user accesses the injected page."}], "title": "Checkout Files Upload for WooCommerce <= 2.2.1 - Unauthenticated Stored Cross-Site Scripting", "references": [{"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/09d9785a-db71-4735-b86b-7fa10cf36a0b?source=cve"}, {"url": "https://plugins.trac.wordpress.org/changeset?old_path=/checkout-files-upload-woocommerce/tags/2.2.1&new_path=/checkout-files-upload-woocommerce/tags/2.2.2"}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')", "cweId": "CWE-79", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N", "baseScore": 7.2, "baseSeverity": "HIGH"}}], "credits": [{"lang": "en", "type": "finder", "value": "RIN MIYACHI"}], "timeline": [{"time": "2025-04-26T00:00:00.000Z", "lang": "en", "value": "Discovered"}, {"time": "2025-05-02T00:00:00.000Z", "lang": "en", "value": "Vendor Notified"}, {"time": "2025-11-17T20:47:11.000Z", "lang": "en", "value": "Disclosed"}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-11-18T21:33:16.578612Z", "id": "CVE-2025-4212", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-11-18T21:33:24.744Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-4212", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2025-11-18T21:33:16.578612Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-11-18T21:33:20.383Z"}}], "cna": {"title": "Checkout Files Upload for WooCommerce <= 2.2.1 - Unauthenticated Stored Cross-Site Scripting", "credits": [{"lang": "en", "type": "finder", "value": "RIN MIYACHI"}], "metrics": [{"cvssV3_1": {"version": "3.1", "baseScore": 7.2, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N"}}], "affected": [{"vendor": "wpwham", "product": "Checkout Files Upload for WooCommerce", "versions": [{"status": "affected", "version": "0", "versionType": "semver", "lessThanOrEqual": "2.2.1"}], "defaultStatus": "unaffected"}], "timeline": [{"lang": "en", "time": "2025-04-26T00:00:00.000Z", "value": "Discovered"}, {"lang": "en", "time": "2025-05-02T00:00:00.000Z", "value": "Vendor Notified"}, {"lang": "en", "time": "2025-11-17T20:47:11.000Z", "value": "Disclosed"}], "references": [{"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/09d9785a-db71-4735-b86b-7fa10cf36a0b?source=cve"}, {"url": "https://plugins.trac.wordpress.org/changeset?old_path=/checkout-files-upload-woocommerce/tags/2.2.1&new_path=/checkout-files-upload-woocommerce/tags/2.2.2"}], "descriptions": [{"lang": "en", "value": "The Checkout Files Upload for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via file uploads in all versions up to, and including, 2.2.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in image files that will execute whenever a user accesses the injected page."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-79", "description": "CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')"}]}], "providerMetadata": {"orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "shortName": "Wordfence", "dateUpdated": "2026-04-08T16:34:33.090Z"}}}, "cveMetadata": {"cveId": "CVE-2025-4212", "state": "PUBLISHED", "dateUpdated": "2026-04-08T16:34:33.090Z", "dateReserved": "2025-05-02T11:46:23.557Z", "assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "datePublished": "2025-11-18T09:27:35.729Z", "assignerShortName": "Wordfence"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Checkout Files Upload for WooCommerce", "vendor": "wpwham", "versions": [{"lessThanOrEqual": "2.2.1", "status": "affected", "version": "0", "versionType": "semver"}]}], "source": "security@wordfence.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "The Checkout Files Upload for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via file uploads in all versions up to, and including, 2.2.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in image files that will execute whenever a user accesses the injected page."}, {"lang": "es", "value": "El plugin Checkout Files Upload for WooCommerce para WordPress es vulnerable a cross-site scripting almacenado a trav\u00e9s de cargas de archivos en todas las versiones hasta la 2.2.1, inclusive, debido a una sanitizaci\u00f3n de entrada y un escape de salida insuficientes. Esto hace posible que atacantes no autenticados inyecten scripts web arbitrarios en archivos de imagen que se ejecutar\u00e1n cada vez que un usuario acceda a la p\u00e1gina inyectada."}], "id": "CVE-2025-4212", "lastModified": "2026-10-18T20:10:00.110", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.2, "baseSeverity": "HIGH", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 2.7, "source": "security@wordfence.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-4212", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2025-11-18T21:33:16.578612Z", "version": "2.0.3"}}]}, "published": "2025-11-18T10:15:50.073", "references": [{"source": "security@wordfence.com", "url": "https://plugins.trac.wordpress.org/changeset?old_path=/checkout-files-upload-woocommerce/tags/2.2.1&new_path=/checkout-files-upload-woocommerce/tags/2.2.2"}, {"source": "security@wordfence.com", "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/09d9785a-db71-4735-b86b-7fa10cf36a0b?source=cve"}], "sourceIdentifier": "security@wordfence.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-79"}], "source": "security@wordfence.com", "type": "Secondary"}]}

{}

{"analysis": {"en": {"generated_at": "2026-04-27T22:51:11.406503+00:00", "value": {"mitigation_remediation": ["Apply the latest vendor patch that resolves the stored XSS issue.", "If a patch is not immediately available, disable or uninstall the Checkout Files Upload plugin and delete any stored image files that could contain injected scripts.", "Restrict the file upload capability so that only authorized users or administrators can upload files, and validate uploads to accept only safe image types and enforce server\u2011side content checks."], "summary": {"action": "Patch", "impact": "Stored XSS"}, "threat_synthesis": {"affected_systems": "WordPress sites that have the Checkout Files Upload for WooCommerce plugin from wpwham, version 2.2.1 or earlier, are affected. The vulnerability exists solely in the plugin\u2019s handling of file uploads and is independent of the operating system or WordPress core version.", "description_and_impact": "The Checkout Files Upload for WooCommerce plugin stores uploaded images without proper sanitization or escaping. An attacker who can upload a crafted image can embed malicious JavaScript that will be executed when the image\u2014or the page that references it\u2014is viewed by any browser. This flaw enables arbitrary script execution in the context of the site, classifying it as a stored cross\u2011site scripting vulnerability (CWE-79).", "risk_and_exploitability": "The CVSS score of 7.2 indicates a high\u2011severity issue, and the EPSS score of less than\u202f1\u202f% suggests that exploitation is currently unlikely. The vulnerability is not listed in the CISA KEV catalog. Attackers need only to upload a malicious image to the public upload endpoint; no authentication is required. If the image is displayed to users, the injected script runs in their browsers, allowing the attacker to execute arbitrary code in the site\u2019s context."}}}}, "created": "2025-11-18T14:15:58.460813+00:00", "updated": "2026-04-27T23:00:13.970811+00:00", "vendors": ["wordpress", "wordpress$PRODUCT$wordpress", "wpwham", "wpwham$PRODUCT$checkout_files_upload_for_woocommerce"]}