Medium severity5.4NVD Advisory· Published May 19, 2025· Updated Jun 17, 2026

CVE-2025-48284

Description

Cross-Site Request Forgery (CSRF) vulnerability in shohei.tanaka Japanized For WooCommerce woocommerce-for-japan allows Cross Site Request Forgery.This issue affects Japanized For WooCommerce: from n/a through <= 2.6.40.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

WordPress/Woocommerce For Japaninferred
Range: <= 2.6.40
Package: https://wordpress.org/plugins/woocommerce-for-japan
WordPress/Japanized For WooCommercellm-fuzzy
Range: <=2.6.40

Patches

Vulnerability mechanics

References

patchstack.com/database/Wordpress/Plugin/woocommerce-for-japan/vulnerability/wordpress-japanized-for-woocommerce-2-6-40-cross-site-request-forgery-csrf-vulnerabilitynvd

News mentions

No linked articles in our index yet.

cvss	0.351
epss	0.000
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000