CVE-2025-24647: WordPress WooCommerce Cloak Affiliate Links plugin <= 1.0.35 - Cross Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery (CSRF) vulnerability in datafeedr WooCommerce Cloak Affiliate Links woocommerce-cloak-affiliate-links allows Cross Site Request Forgery.This issue affects WooCommerce Cloak Affiliate Links: from n/a through <= 1.0.35.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2025-24647?
CVE-2025-24647 is considered a medium severity Cross-Site Request Forgery (CSRF) vulnerability.
What versions of WooCommerce Cloak Affiliate Links are affected by CVE-2025-24647?
CVE-2025-24647 affects WooCommerce Cloak Affiliate Links versions up to and including 1.0.35.
How do I fix CVE-2025-24647?
To fix CVE-2025-24647, update the WooCommerce Cloak Affiliate Links plugin to the latest version.
What type of vulnerability is CVE-2025-24647?
CVE-2025-24647 is a Cross-Site Request Forgery (CSRF) vulnerability that allows unauthorized actions on behalf of authenticated users.
What can attackers do exploiting CVE-2025-24647?
Attackers exploiting CVE-2025-24647 can perform malicious actions without the user's consent by tricking them into executing unwanted requests.