CVE-2025-62061

MediumCVSS 4.3

Published: 22/10/2025(UTC)Updated: 08/10/2026(UTC)Translated: 08/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.13%

2th percentile - higher than 2% of all known CVEs

Summary

Cross-Site Request Forgery (CSRF) vulnerability in impleCode Product Catalog Simple post-type-x. This issue affects Product Catalog Simple: from n/a through <= 1.8.4.

Risk Assessment

The risk is the possibility of unauthorized actions performed by an attacker in the context of an administrator, potentially leading to changes in product catalog settings or other damage.

Recommendation

Update the Product Catalog Simple plugin to a version newer than 1.8.4, which includes a fix for the CSRF vulnerability.

Other vulnerabilities in Product Catalog Simple

CVE-2025-58992Medium
The Product Catalog Simple plugin by impleCode has a stored XSS vulnerability due to improper neutralization of input during web page generation. Affects versions up to and including 1.8.2.

Original NVD description (English source)

Cross-Site Request Forgery (CSRF) vulnerability in impleCode Product Catalog Simple post-type-x.This issue affects Product Catalog Simple: from n/a through <= 1.8.4.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS