High · 7.1 CVE-2026-39758 EUVD-2026-93267GHSA-jx63-c27r-2qqp

WordPress Midtrans-WooCommerce plugin <= 2.32.3 - Cross Site Scripting (XSS) vulnerability

Published Oct 6, 2026 · Updated Oct 6, 2026 · Assigned by Patchstack

Vendor: Midtrans Product: Midtrans-WooCommerce Category: Web / CMS

Description

Unauthenticated Cross Site Scripting (XSS) in Midtrans-WooCommerce <= 2.32.3 versions.

Affected products

Vendor	Product	Affected	Fixed
Midtrans	Midtrans-WooCommerce	≤ 2.32.3	—

References

https://patchstack.com/database/wordpress/plugin/midtrans-woocommerce/vulnerability/wordpress-midtrans-woocommerce-plugin-2-32-3-cross-site-scripting-xss-vulnerability?_s_id=cve vdb-entry