CVE-2025-12398

Name of the Vulnerable Software and Affected Versions Product Table for WooCommerce plugin versions prior to 5.0.9

Description The Product Table for WooCommerce plugin is susceptible to Reflected Cross-Site Scripting due to inadequate input sanitization and output escaping. This allows unauthenticated attackers to inject arbitrary web scripts into pages. Successful exploitation requires tricking a user into performing an action, such as clicking a link. The vulnerability exists via the search key parameter.

Recommendations Update the Product Table for WooCommerce plugin to version 5.0.9 or later.