Vulnerabilities
CVE-2025-12358 - ShopEngine <= 4.8.5 - cross-site request forgery to wishlist manipulation
CVE ID : CVE-2025-12358 Published : Dec. 3, 2025, 1:16 p.m. | 1 hour, 5 minutes ago Description : The ShopEngine Elementor WooCommerce Builder Addon plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 4.8.5. This is due to missing nonce validation on the
Source: Telegram CVE Monitor