CVE-2025-30825: WordPress WPC Smart Linked Products plugin <= 1.3.5 - Privilege Escalation vulnerability
Missing Authorization vulnerability in WPClever WPC Smart Linked Products - Upsells & Cross-sells for WooCommerce wpc-smart-linked-products allows Privilege Escalation.This issue affects WPC Smart Linked Products - Upsells & Cross-sells for WooCommerce: from n/a through <= 1.3.5.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2025-30825?
CVE-2025-30825 is a high severity vulnerability that allows for privilege escalation in WPClever WPC Smart Linked Products.
How do I fix CVE-2025-30825?
To fix CVE-2025-30825, update WPC Smart Linked Products - Upsells & Cross-sells for WooCommerce to version 1.3.6 or later.
What systems are affected by CVE-2025-30825?
CVE-2025-30825 affects WPC Smart Linked Products - Upsells & Cross-sells for WooCommerce version 1.3.5 and earlier.
What type of vulnerability is CVE-2025-30825?
CVE-2025-30825 is classified as a Missing Authorization vulnerability.
Can CVE-2025-30825 lead to data exposure?
Yes, CVE-2025-30825 can lead to unauthorized access and potential data exposure due to privilege escalation.