CVE-2025-53569
BaseFortify
Publication date: 2025-07-04
Last updated on: 2026-04-23
Assigner: Patchstack
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-352 | The web application does not, or cannot, sufficiently verify whether a request was intentionally provided by the user who sent the request, which could have originated from an unauthorized actor. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability is a Cross-Site Request Forgery (CSRF) in the Trust Payments Gateway for WooCommerce (JavaScript Library) plugin versions up to 1.3.6. It allows a malicious actor to trick authenticated users with higher privileges into executing unwanted actions on the site without their consent, potentially compromising site integrity. [1]
How can this vulnerability impact me? :
The vulnerability can impact you by allowing attackers to perform unauthorized actions on your WooCommerce site if a privileged user is tricked into executing malicious requests. This could lead to compromised site integrity, although the risk is considered low and exploitation is unlikely. [1]
How can this vulnerability be detected on my network or system? Can you suggest some commands?
Detection of this CSRF vulnerability involves checking the version of the Trust Payments Gateway for WooCommerce (JavaScript Library) plugin installed on your system. If the version is 1.3.6 or earlier, it is vulnerable. There are no specific network or system commands provided to detect exploitation attempts. You can verify the plugin version via WordPress admin dashboard or by checking the plugin files directly. [1]
What immediate steps should I take to mitigate this vulnerability?
The immediate step to mitigate this vulnerability is to update the Trust Payments Gateway for WooCommerce (JavaScript Library) plugin to version 1.3.7 or later, where the vulnerability is fixed. Additionally, Patchstack offers virtual patching (vPatching) to auto-mitigate this and other vulnerabilities before official patches are applied, which can provide rapid protection. [1]