High · 7.1 CVE-2023-32118 EUVD-2023-36386GHSA-c69v-cqxw-9xxx

WordPress SALERT Plugin <= 1.2.1 is vulnerable to Cross Site Scripting (XSS)

Published Jun 12, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in WPoperation SALERT – Fake Sales Notification WooCommerce plugin <= 1.2.1 versions.

Vendor	Product	Affected	Fixed
WPoperation	SALERT – Fake Sales Notification WooCommerce	≤ 1.2.1	—