Skip to content
OpenAdvisories
High · 7.1 CVE-2026-39437 EUVD-2026-37044GHSA-rv8c-72rj-h273

WordPress Min Max Step Quantity Limits Manager for WooCommerce plugin <= 5.2.2 - Reflected Cross Site Scripting (XSS) vulnerability

Published Jun 16, 2026 · Updated Jun 16, 2026 · Assigned by Patchstack

Vendor: WPFactory Product: Min Max Step Quantity Limits Manager for WooCommerce Category: Web / CMS

Description

Unauthenticated Cross Site Scripting (XSS) in Min Max Step Quantity Limits Manager for WooCommerce <= 5.2.2 versions.

Affected products

VendorProductAffectedFixed
WPFactory Min Max Step Quantity Limits Manager for WooCommerce ≤ 5.2.2 —

References