Medium severity6.1NVD Advisory· Published Jan 24, 2022· Updated Jun 17, 2026

CVE-2021-25062

Description

The Orders Tracking for WooCommerce WordPress plugin before 1.1.10 does not sanitise and escape the file_url before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

WordPress/Mimo Woocommerce Order Trackingcpe-rescue
Package: https://wordpress.org/plugins/mimo-woocommerce-order-tracking
WordPress/Orders Tracking for WooCommercellm-fuzzy
Range: <1.1.10

Patches

Vulnerability mechanics

References

plugins.trac.wordpress.org/changeset/2643807nvdPatchThird Party Advisory
wpscan.com/vulnerability/dc9a5d36-7453-46a8-a17f-712449d7987dnvdExploitThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.397
epss	0.001
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000