CVE-2025-68994

Severity CVSS v4.0:

Pending analysis

Type:

Unavailable / Other

Publication date:

30/12/2025

Last modified:

30/12/2025

Description

Missing Authorization vulnerability in XforWooCommerce Product Loops for WooCommerce product-loops allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Product Loops for WooCommerce: from n/a through

Impact

References to Advisories, Solutions, and Tools

https://vdp.patchstack.com/database/Wordpress/Plugin/product-loops/vulnerability/wordpress-product-loops-for-woocommerce-plugin-2-1-2-broken-access-control-vulnerability?_s_id=cve