5.9
Medium
CVE-2024-39666 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in…
Description
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Automattic WooCommerce.This issue affects WooCommerce: from n/a through 9.1.2.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| WooCommerce 9.1 | earliest → 9.1.2 | No fix stated |
Other CVEs of WooCommerce
The 18 CVEs of WooCommerce →
CVE-2026-106608
Incorrect Privilege Assignment vulnerability in Automattic WooCommerce woocommerce allows Privilege Escalation.This…
7.2
High
CVE-2026-48888
Allocation of Resources Without Limits or Throttling vulnerability in Automattic WooCommerce allows HTTP DoS
7.5
High
CVE-2026-57777
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Automattic…
7.6
High
CVE-2026-3589
The WooCommerce WordPress plugin from versions 5.4.0 to 10.5.2 does not properly handle batch requests, which could…
7.5
High