PT-2025-49004 · WordPress+1 · Omnichannel For Woocommerce+1

Angus Girvan

·

Published

2025-12-04

·

Updated

2025-12-09

·

CVE-2025-11727

CVSS v3.1

7.2

High

VectorAV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions Omnichannel for WooCommerce: Google, Amazon, eBay & Walmart Integration – Powered by Codisto versions prior to 1.3.65
Description The Omnichannel for WooCommerce: Google, Amazon, eBay & Walmart Integration – Powered by Codisto plugin for WordPress has a Stored Cross-Site Scripting issue because of inadequate input sanitization and output escaping. This allows unauthenticated attackers to inject arbitrary web scripts into pages. These scripts will execute when a user accesses the injected page via the sync() function.
Recommendations Update the Omnichannel for WooCommerce: Google, Amazon, eBay & Walmart Integration – Powered by Codisto plugin to a version later than 1.3.65.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2025-11727

Affected Products

Codisto
Omnichannel For Woocommerce