CVE-2025-26875: WordPress Multiple Shipping And Billing Address For Woocommerce Plugin <= 1.3 - SQL Injection vulnerability
First published: Sat Mar 15 2025(Updated: )
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in silverplugins217 Multiple Shipping And Billing Address For Woocommerce allows SQL Injection. This issue affects Multiple Shipping And Billing Address For Woocommerce: from n/a through 1.3.
Credit: audit@patchstack.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| WordPress Multiple Shipping And Billing Address For WooCommerce | <=1.3 | |
| SilverPlugins Multiple Shipping And Billing Address For Woocommerce | <=1.3 |
Remedy
Update the WordPress Multiple Shipping And Billing Address For Woocommerce wordpress plugin to the latest available version (at least 1.5).
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the severity of CVE-2025-26875?
CVE-2025-26875 has been classified as a high-severity vulnerability due to its potential for SQL Injection attacks.
How do I fix CVE-2025-26875?
To mitigate CVE-2025-26875, update the Multiple Shipping And Billing Address For Woocommerce plugin to the latest version provided by SilverPlugins.
What impact can CVE-2025-26875 have on my site?
CVE-2025-26875 can allow attackers to execute arbitrary SQL commands on your database, compromising sensitive data.
Is CVE-2025-26875 easy to exploit?
Yes, CVE-2025-26875 can be exploited relatively easily if the vulnerable plugin is used without protective measures.
Which software versions are affected by CVE-2025-26875?
CVE-2025-26875 affects Multiple Shipping And Billing Address For Woocommerce versions up to and including 1.3.
- agent/weakness
- agent/title
- agent/references
- agent/remedy
- agent/description
- agent/type
- agent/first-publish-date
- collector/nvd-api
- source/NVD
- agent/severity
- agent/author
- agent/source
- agent/tags
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/event
- agent/softwarecombine
- collector/epss-latest
- source/FIRST
- agent/epss
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/silverplugins
- canonical/wordpress multiple shipping and billing address for woocommerce
- vendor/wordpress
- canonical/silverplugins multiple shipping and billing address for woocommerce