Medium · 6.5 CVE-2023-46783 EUVD-2023-50950GHSA-r4qh-qg67-8mh2

WordPress Pre-Orders for WooCommerce Plugin <= 1.2.13 is vulnerable to Cross Site Scripting (XSS)

Published Nov 6, 2023 · Updated Apr 29, 2026 · Assigned by Patchstack

Description

Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Bright Plugins Pre-Orders for WooCommerce plugin <= 1.2.13 versions.

Vendor	Product	Affected	Fixed
Bright Plugins	Pre-Orders for WooCommerce	≤ 1.2.13	—