What is the CVSS score of CVE-2025-69378?

CVE-2025-69378 has a CVSS 3.1 base score of 7.2 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.0%.

Which versions of WordPress are affected by CVE-2025-69378?

A high-severity vulnerability (CVSS 7.3) exists in the XforWooCommerce Product Filter plugin used by WooCommerce stores, potentially allowing attackers to compromise affected e-commerce platforms.

How to fix or mitigate CVE-2025-69378?

Within 24 hours: Identify all instances of XforWooCommerce Product Filter across your WooCommerce infrastructure and document affected systems. Within 7 days: Implement compensating controls (WAF rules blocking malicious requests to the plugin, network segmentation isolating affected stores). Within 30 days: Monitor vendor for patch release and prepare deployment plan; consider alternative filtering solutions if patch timeline extends beyond 60 days.

WordPress CVE-2025-69378

HIGH

Incorrect Privilege Assignment (CWE-266)

2026-02-20 audit@patchstack.com

WordPress Privilege Escalation

7.2

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

7.2 HIGH

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector

Network

Attack Complexity

Low

Privileges Required

High

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Re-analysis Queued

Apr 23, 2026 - 15:43 vuln.today

cvss_changed

CVSS changed

Apr 23, 2026 - 15:43 NVD

7.3 (HIGH) 7.2 (HIGH)

Analysis Generated

Mar 12, 2026 - 22:04 vuln.today

CVE Published

Feb 20, 2026 - 16:22 nvd

HIGH 7.3

DescriptionCVE.org

Incorrect Privilege Assignment vulnerability in XforWooCommerce Product Filter for WooCommerce prdctfltr allows Privilege Escalation.This issue affects Product Filter for WooCommerce: from n/a through <= 9.1.2.

AnalysisAI

XforWooCommerce Product Filter for WooCommerce prdctfltr contains a security vulnerability (CVSS 7.3).

Technical ContextAI

affects XforWooCommerce Product Filter for WooCommerce prdctfltr. Incorrect Privilege Assignment vulnerability in XforWooCommerce Product Filter for WooCommerce prdctfltr allows Privilege Escalation.This issue affects Product Filter for WooCommerce: from n/a through <= 9.1.2.