PT-2025-43170
CVE-2025-49380
·
Published
2025-10-01
·
Updated
2025-11-18
Description by
CVSS 3.1
9.8
CriticalMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
WooCommerce Vehicle Parts Finder versions through 3.7
Description
The WooCommerce Vehicle Parts Finder plugin contains a flaw related to the deserialization of untrusted data, which allows for object injection. This issue impacts the
woo-vehicle-parts-finder component.Recommendations
Update WooCommerce Vehicle Parts Finder to a version later than 3.7.
Found an issue in the description? Have something to add? Feel free to write us 👾