CVE Alert & Security Feed

Stats Digest Feeds

← Back to all CVEs

CVE-2026-81282

MEDIUM NVD

CVSS Score 6.5

Severity MEDIUM

Published Sep 03, 2026

Vendor unknown

Description

Subscriber Cross Site Scripting (XSS) in Product Variations Swatches for WooCommerce <= 1.1.18 versions.

References

https://patchstack.com/database/wordpress/plugin/product-variations-swatches-for-woocommerce/vulnerability/wordpress-product-variations-swatches-for-woocommerce-plugin-1-1-18-cross-site-scripting-xss-vulnerability?_s_id=cve