High · 7.1 CVE-2025-60171 EUVD-2025-31235GHSA-mf5x-hmf9-rvwx

WordPress Conditional Cart Messages for WooCommerce – YourPlugins.com Plugin <= 1.2.10 - Cross Site Request Forgery (CSRF) Vulnerability

Published Sep 26, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: yourplugins Product: Conditional Cart Messages for WooCommerce – YourPlugins.com Category: Web / CMS

Description

Cross-Site Request Forgery (CSRF) vulnerability in yourplugins Conditional Cart Messages for WooCommerce – YourPlugins.com yourplugins-wc-conditional-cart-notices allows Stored XSS.This issue affects Conditional Cart Messages for WooCommerce – YourPlugins.com: from n/a through <= 1.2.10.

Affected products

Vendor	Product	Affected	Fixed
yourplugins	Conditional Cart Messages for WooCommerce – YourPlugins.com	≤ 1.2.10	—

References

https://patchstack.com/database/Wordpress/Plugin/yourplugins-wc-conditional-cart-notices/vulnerability/wordpress-conditional-cart-messages-for-woocommerce-yourplugins-com-plugin-1-2-10-cross-site-request-forgery-csrf-vulnerability?_s_id=cve vdb-entry