SpecFit | Try & Shop – AI Virtual Try-On for WooCommerce
SpecFit | Try & Shop – AI Virtual Try-On for WooCommerce has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it is fixed as of September 2026. Their average CVSS score is 6.1, and the most serious one scores 6.1 out of 10.
The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).
The one issue recorded for SpecFit | Try & Shop – AI Virtual Try-On for WooCommerce has a vendor fix available, so running the current release closes it.
All of these findings were reported by HLog. SpecFit | Try & Shop – AI Virtual Try-On for WooCommerce is installed on roughly 50 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.4.
CVE-2025-23973SpecFit-Virtual Try On Woocommerce <= 10.0.21 - Reflected Cross-Site Scripting
Read the full analysisVulnerability Records
SpecFit | Try & Shop – AI Virtual Try-On for WooCommerce
Author
dugudlabs
SpecFit enables customers to virtually try eyeglasses, sunglasses, and optical frames directly from WooCommerce product pages using mobile cameras or desktop webcams. The virtual try-on technology, AI processing, product rendering, and 3D pipeline are powered by TrynShop. Demo TrynShop demo store: https://trynshop.com/shop/demo Shortcode Fallbacks If your theme does not render the default WooCommerce hooks correctly, you can place these shortcodes manually: Category page try-on widget: [specfit_tryon_widget] Product page try-on button: [specfit_product_tryon_button]
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C