WordPress security by component

Integration for WooCommerce and Salesforce

Plugin description

Integration for WooCommerce and Salesforce is a WordPress component with 1 published CVE record in this archive. The latest tracked vulnerability was published May 07, 2025; the highest CVE/CNA score is 4.7.

Plugin slug: woo-salesforce-plugin-crm-perks

Latest vulnerability

CVE-2025-47455: Integration for WooCommerce and Salesforce: An open redirect

Integration for WooCommerce and Salesforce is affected by an open redirect. Exposure depends on how the affected operation is made reachable by the site. A crafted link can redirect visitors from the trusted site to an attacker-controlled destination.

PublishedMay 07, 2025

Safe version guidanceSee mitigation notes

		Safe version
May 07, 2025	CVE-2025-47455 Integration for WooCommerce and Salesforce: An open redirect Integration for WooCommerce and Salesforce is affected by an open redirect. Exposure depends on how the affected operation is made reachable by the site. A crafted link can redirect visitors from the trusted site to an attacker-controlled destination.	See mitigation notes	CVE4.7 NVDPending