CVE-2025-10191 | Big Post Shipping for WooCommerce Plugin up to 2.1.1 on WordPress Shortcode wooboigpost_shipping_status cross site scripting

A vulnerability, which was classified as problematic, has been found in Big Post Shipping for WooCommerce Plugin up to 2.1.1 on WordPress. This vulnerability affects the function wooboigpost_shipping_status of the component Shortcode Handler. The manipulation leads to cross site scripting.

This vulnerability is referenced as CVE-2025-10191. Remote exploitation of the attack is possible. No exploit is available.