Skip to content
OpenAdvisories
Medium · 6.5 CVE-2026-39508 EUVD-2026-20175GHSA-mv96-qr2j-4hgg

WordPress Advanced Coupons for WooCommerce Coupons plugin <= 4.7.1.1 - Cross Site Scripting (XSS) vulnerability

Published Apr 8, 2026 · Updated Apr 29, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Josh Kohlbach Advanced Coupons for WooCommerce Coupons advanced-coupons-for-woocommerce-free allows DOM-Based XSS.This issue affects Advanced Coupons for WooCommerce Coupons: from n/a through <= 4.7.1.1.

Affected products

VendorProductAffectedFixed
Josh Kohlbach Advanced Coupons for WooCommerce Coupons ≤ 4.7.1.1 —

References