CVE-2026-66468 Unauthenticated Cross Site Scripting (XSS) in Local Delivery Drivers for WooCommerce <= 3.0.0 versions

Description

Unauthenticated Cross Site Scripting (XSS) in Local Delivery Drivers for WooCommerce <= 3.0.0 versions.

Affected products and versions

Product	Affected versions	Fixed in
Local Delivery Drivers for WooCommerce 3.0	earliest → 3.0.0	No fix stated

Other CVEs of Local Delivery Drivers for WooCommerce

The 3 CVEs of Local Delivery Drivers for WooCommerce →

CVE-2022-4974 The Freemius SDK, as used by hundreds of WordPress plugin and theme developers, was vulnerable to Cross-Site Request… 6.3 Medium CVE-2023-51481 Improper Privilege Management vulnerability in powerfulwp Local Delivery Drivers for WooCommerce allows Privilege… 9.8 Critical