PT-2026-21182 · Unknown · Wooodt Lite

CVE-2025-69401 · Publicado 2026-02-20 · Atualizado 2026-02-22

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions WooODT Lite versions through 2.5.2

Description An authentication bypass by spoofing issue exists in WooODT Lite, potentially allowing identity spoofing. The issue impacts the application’s authentication mechanism, enabling unauthorized access or actions.

Recommendations Update WooODT Lite to a version later than 2.5.2.

Correção

Authentication Bypass by Spoofing

Enumeração de Fraquezas

CWE-290

Identificadores relacionados

CVE-2025-69401

Produtos afetados

Wooodt Lite

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2025-69401 · Nota de Segurança
• https://twitter.com/CVEnew/status/2025425471555703200 · Publicação no Twitter
• https://patchstack.com/database/Wordpress/Plugin/byconsole-woo-order-delivery-time/vulnerability/wordpress-wooodt-lite-plugin-2-5-2-payment-bypass-vulnerability-vulnerability?_s_id=cve · Nota