Skip to content
OpenAdvisories
High · 7.1 CVE-2023-33925 EUVD-2023-38075GHSA-fhf6-6jqq-8p77

WordPress WooCommerce Product Categories Selection Widget Plugin <= 2.0 is vulnerable to Cross Site Scripting (XSS)

Published Jul 25, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: PluginForage Product: WooCommerce Product Categories Selection Widget Category: Web / CMS

Description

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in PluginForage WooCommerce Product Categories Selection Widget plugin <= 2.0 versions.

Affected products

VendorProductAffectedFixed
PluginForage WooCommerce Product Categories Selection Widget ≤ 2.0 —

References