CVE-2025-5813: SUHAILAHMAD64 Amazon Products To Woocommerce

Medium severity, CVSS 5.3. EPSS: 0.3% chance of exploitation in the next 30 days.

The Amazon Products to WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the wcta2w_get_amazon_product_callback() function in all versions up to, and including, 1.2.7. This makes it possible for unauthenticated attackers to create new produces.

Affected products

• SUHAILAHMAD64 Amazon Products To Woocommerce: up to and including 1.2.7

Published 2025-06-26. Last modified 2026-06-17.