Skip to content
OpenAdvisories
Medium · 6.5 CVE-2026-114701 EUVD-2026-108082GHSA-vjmh-mp76-qfx6

WordPress Waitlist Woocommerce ( Back in stock notifier ) plugin <= 2.9.1 - Cross Site Scripting (XSS) vulnerability

Published Oct 22, 2026 · Updated Oct 22, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in xootix Waitlist Woocommerce ( Back in stock notifier ) waitlist-woocommerce allows Stored XSS.This issue affects Waitlist Woocommerce ( Back in stock notifier ): from n/a through 2.9.1.

Affected products

VendorProductAffectedFixed
xootix Waitlist Woocommerce ( Back in stock notifier ) ≤ 2.9.1 —

References