VulnerabilityDeferred

CVE-2025-22622

Verify your customer's identity 1.20.0 was found to be vulnerable.

MEDIUM 4.3EPSS 0.28%

Does this matter?

Lower severity and a low EPSS score (0.28%). Track it; it rarely justifies an emergency change on its own.

Description

Age Verification for your checkout page. Verify your customer's identity 1.20.0 was found to be vulnerable. The web application dynamically generates web content without validating the source of the potentially untrusted data in myapp/class-wc-integration-agechecker-integration.php.

CVSS 3.1: 4.3 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
EPSS: 0.28% probability · 20th percentile
CISA KEV: Not listed
Weakness: CWE-79
Source: help@fluidattacks.com

References

https://fluidattacks.com/advisories/skims-5/
https://wordpress.org/plugins/agecheckernet/#developers

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.