High · 7.1 CVE-2026-66605 EUVD-2026-63344GHSA-7j52-5q8c-pc9j

WordPress Swatchly – WooCommerce Variation Swatches for Products plugin <= 1.4.13 - Cross Site Scripting (XSS) vulnerability

Published Aug 20, 2026 · Updated Aug 20, 2026 · Assigned by Patchstack

Description

Unauthenticated Cross Site Scripting (XSS) in Swatchly – WooCommerce Variation Swatches for Products <= 1.4.13 versions.

Vendor	Product	Affected	Fixed
HasThemes	Swatchly – WooCommerce Variation Swatches for Products	≤ 1.4.13	—