CVE-2025-62008CWE-502insecure-deserialization

CVE-2025-62008

High · published October 22, 2025

CVSS v3.1
8.8
EPSS
1%
Percentile
43.2
In the wild
Unconfirmed
What it is

🚨 A deserialization flaw is lurking in the Product Table for WooCommerce, and it's a big deal! If you're on version 1.2.4 or below, it’s time to take action. ⚡ Think of this like a restaurant receiving orders from a delivery service that never checks the kitchen's safety guidelines — they might serve dishes that are downright dangerous! In this case, an attacker could manipulate unexpected data formats, leading to chaos behind the scenes. An attacker could leverage this vulnerability to execute arbitrary code, which means they could access sensitive data, compromise your website’s integrity, or cause complete mayhem within your system. Imagine a hacker having free rein to create or modify product listings at will — absolutely devastating for any online store!

Put simply

Think of this like a restaurant receiving orders from a delivery service that never checks the kitchen's safety guidelines — they might serve dishes that are downright dangerous! In this case, an attacker could manipulate unexpected data formats, leading to chaos behind the scenes. This deserialization vulnerability allows untrusted data to be processed without proper validation, making it ripe for exploitation. Attackers could send malicious payloads to the server, triggering unexpected behaviors or even remote code execution.

What to do

An attacker could leverage this vulnerability to execute arbitrary code, which means they could access sensitive data, compromise your website’s integrity, or cause complete mayhem within your system. Imagine a hacker having free rein to create or modify product listings at will — absolutely devastating for any online store! To safeguard your store, update Product Table for WooCommerce to the latest version immediately. Ensure you’ve implemented proper input validation. Regularly audit your plugins for any further vulnerabilities to keep your site secure. You've got this! With a quick patch, you'll shield your store from potential threats and stay one step ahead of the hackers. 🛡️

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00518 · 43.2th percentile
Weakness
CWE-502 · Deserialization of Untrusted Data
Published
2025-10-22T19:16Z
References (1)
EPSS history
Timeline
  • 22 OCT 14:32Z
    WordPress Product Table For WooCommerce plugin <= 1.2.4 - PHP Object Injection vulnerability
    cvelistv5