CVE-2026-105972: WooCommerce Menu Cart < 3.2.1 - Unauthenticated Stored XSS via Cart Item Variation Attribute

Q: Who can exploit this issue and whose session is at risk?

An unauthenticated user can store a script payload in cart item variation data. The payload may execute when another user views the affected cart slide-out, including a logged-in administrator.

Q: Which plugin versions are affected?

Versions of Menu Cart for WooCommerce before 3.2.1 are affected. Version 3.2.1 or later is not identified as affected by the provided information.

Q: Where is the unsafe data rendered?

The affected variation data is output in the plugin's cart slide-out. The issue arises because that data is not sanitised and escaped before it is rendered.

Published Oct 28, 2026

Updated

The Menu Cart for WooCommerce WordPress plugin before 3.2.1 does not sanitise and escape cart item variation data before outputting it in its cart slide-out, allowing unauthenticated users to store a Cross-Site Scripting payload that can be delivered to and executed in the session of another user, including a logged-in administrator.

Affected Software

1 affected component

WooCommerce Menu Cart for WooCommerce<3.2.1

Event History

Oct 28, 2026

CVE Published

via MITRE·06:00 AM

Data Sourced

via MITRE·06:00 AM

DescriptionWeakness

Frequently Asked Questions

Who can exploit this issue and whose session is at risk?

An unauthenticated user can store a script payload in cart item variation data. The payload may execute when another user views the affected cart slide-out, including a logged-in administrator.

Which plugin versions are affected?

Versions of Menu Cart for WooCommerce before 3.2.1 are affected. Version 3.2.1 or later is not identified as affected by the provided information.

Where is the unsafe data rendered?

The affected variation data is output in the plugin's cart slide-out. The issue arises because that data is not sanitised and escaped before it is rendered.

CVE-2026-105972: WooCommerce Menu Cart < 3.2.1 - Unauthenticated Stored XSS via Cart Item Variation Attribute

Affected Software

Event History

Frequently Asked Questions

Who can exploit this issue and whose session is at risk?

Which plugin versions are affected?

Where is the unsafe data rendered?

Company

Resources

Contact

Frequently Asked Questions

Who can exploit this issue and whose session is at risk?

Which plugin versions are affected?

Where is the unsafe data rendered?