Easy Woocommerce Customizer
Easy Woocommerce Customizer has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it remains unpatched as of September 2026. Their average CVSS score is 6.1, and the most serious one scores 6.1 out of 10.
The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).
The one issue recorded for Easy Woocommerce Customizer has no published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2025.
All of these findings were reported by Nguyen Xuan Chien. Easy Woocommerce Customizer is installed on roughly 50 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 4.7.35.
CVE-2025-59006Easy Woocommerce Customizer <= 1.0.2 - Reflected Cross-Site Scripting
Read the full analysisVulnerability Records
Easy Woocommerce Customizer
Author
themebon
Easy Woocommerce Customizer plugin allow you to customize many of woocommerce things with plenty of features without manually writing codes. Features Enable Customer Contact – Customers can contact to admin from their My Account page Change Add to Cart Text on Products Page Change Add to Cart Text on Single Product Page Change Add to Cart Text on Simple Product Type Change Add to Cart Text on Variable Product Type Change Add to Cart Text on External Product Type Change Add to Cart Text on Grouped Product Type Change Add to Cart Text by Product ID Change Add to Cart Text by Product ID Text Change Add to Cart Text on Products Page Remove Billing First Name from Checkout Page Remove Billing Last Name from Checkout Page Remove Billing Company from Checkout Page Remove Billing Address 1 from Checkout Page Remove Billing Address 2 from Checkout Page Remove Billing City from Checkout Page Remove Billing State from Checkout Page Remove Billing Post Code from Checkout Page Remove Billing Phone from Checkout Page Remove Billing Fields if the product price is $0 or free from Checkout Page Remove Order Note from Checkout Page Rename Order Comments from Checkout Page Change Placeholder Text from Checkout Page Custom Checkout Message Guest Checkout Login Message Change Free Product Price Text Change Sale Text Search Placeholder Text Change Remove Sort by popularity – remove popularity option from product sorting Remove Sort by average rating Remove Sort by newness Remove Sort by price Remove Related Products Remove Shop Breadcrumb +more coming
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C