High · 7.1 CVE-2023-33319 EUVD-2023-37482GHSA-9vw6-9gf6-x43j

WordPress WooCommerce Follow-Up Emails Plugin <= 4.9.40 is vulnerable to Cross Site Scripting (XSS)

Published May 28, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in WooCommerce WooCommerce Follow-Up Emails (AutomateWoo) plugin <= 4.9.40 versions.

Vendor	Product	Affected	Fixed
WooCommerce	WooCommerce Follow-Up Emails (AutomateWoo)	≤ 4.9.40	—