CVE-2025-58224

MediumCVSS 5.4

Published: 22/09/2025(UTC)Updated: 11/10/2026(UTC)Translated: 12/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.14%

3th percentile - higher than 3% of all known CVEs

Summary

CSRF vulnerability in the Printeers Print & Ship plugin. Allows an attacker to perform unauthorized requests on behalf of an administrator.

Risk Assessment

Potential to change printing or shipping settings, leading to incorrect operations.

Recommendation

Update Printeers Print & Ship to a patched version. Apply CSRF tokens.

Other vulnerabilities in Printeers Print & Ship

CVE-2025-52766Medium
Missing Authorization vulnerability in Printeers Printeers Print & Ship allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Printeers Print & Ship from n/a through 1.17.0.

Original NVD description (English source)

Cross-Site Request Forgery (CSRF) vulnerability in Printeers Printeers Print & Ship allows Cross Site Request Forgery. This issue affects Printeers Print & Ship: from n/a through 1.17.0.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS