CVE-2026-78283 Unauthenticated Cross Site Scripting (XSS) in Music Player for WooCommerce <= 1.8.9 versions

Description

Unauthenticated Cross Site Scripting (XSS) in Music Player for WooCommerce <= 1.8.9 versions.

Produits et versions touchés

Produit	Versions touchées	Corrigé en
Music Player for WooCommerce 1.8	premières → 1.8.9	Pas de correctif indiqué

Autres CVE de Music Player for WooCommerce

Les 3 CVE de Music Player for WooCommerce →

CVE-2026-93624 Shop manager PHP Object Injection in Music Player for WooCommerce <= 1.9.1 versions 7.2 Élevée CVE-2025-47472 Missing Authorization vulnerability in codepeople Music Player for WooCommerce music-player-for-woocommerce allows… 5.4 Moyenne