Description
Subscriber Cross Site Scripting (XSS) in Product Variations Swatches for WooCommerce <= 1.1.18 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| VillaTheme | Product Variations Swatches for WooCommerce | ≤ 1.1.18 | — |
Medium · 6.5
CVE-2026-81282
EUVD-2026-70595GHSA-mf65-p8hw-47qx
WordPress Product Variations Swatches for WooCommerce plugin <= 1.1.18 - Cross Site Scripting (XSS) vulnerability
Published Sep 3, 2026 · Updated Sep 4, 2026 · Assigned by Patchstack