CVE-2026-81282 — WordPress Product Variations Swatches for WooCommerce plugin <= 1.1.18 - Cross Site Scripting (XSS) vulnerability

CVE-2026-81282

WordPress Product Variations Swatches for WooCommerce plugin <= 1.1.18 - Cross Site Scripting (XSS) vulnerability PUBLISHED

Description (CNA)

Subscriber Cross Site Scripting (XSS) in Product Variations Swatches for WooCommerce <= 1.1.18 versions.

Vendor / product	Versions
VillaTheme / Product Variations Swatches for WooCommerce	affected n/a through 1.1.18

CWE-79

CISA-ADP

No English description supplied.

No references supplied.