Skip to content
OpenAdvisories
High · 7.1 CVE-2026-27376 EUVD-2026-9632GHSA-q9w5-8wfq-86q7

WordPress Claue - Clean, Minimal Elementor WooCommerce Theme theme <= 2.2.7 - Reflected Cross Site Scripting (XSS) vulnerability

Published Mar 5, 2026 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: JanStudio Product: Claue - Clean, Minimal Elementor WooCommerce Theme Category: Web / CMS

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in JanStudio Claue - Clean, Minimal Elementor WooCommerce Theme claue allows Reflected XSS.This issue affects Claue - Clean, Minimal Elementor WooCommerce Theme: from n/a through <= 2.2.7.

Affected products

VendorProductAffectedFixed
JanStudio Claue - Clean, Minimal Elementor WooCommerce Theme ≤ 2.2.7 —

References