CVE-2026-118085: WordPress GlobalPayments WooCommerce plugin <= 1.23.3 - Cross Site Scripting (XSS) vulnerability

Q: Who can exploit this issue?

The issue is described as unauthenticated, so an attacker does not need a WordPress account or plugin-specific privileges. Exploitation still requires user interaction, as reflected by the UI:R vector.

Q: Which installations are affected?

GlobalPayments WooCommerce plugin versions 1.23.3 and earlier are affected. The provided data does not state whether any particular WordPress or WooCommerce configuration changes exposure.

Q: What impact can successful exploitation have?

Successful XSS can affect confidentiality, integrity, and availability at low impact levels. The scope is changed, meaning the impact can extend beyond the vulnerable component's original security authority.

Published Oct 29, 2026

Updated

Unauthenticated Cross Site Scripting (XSS) in GlobalPayments WooCommerce <= 1.23.3 versions.

Event History

Oct 29, 2026

CVE Published

via MITRE·03:23 PM

Data Sourced

via MITRE·03:23 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·04:18 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Who can exploit this issue?

The issue is described as unauthenticated, so an attacker does not need a WordPress account or plugin-specific privileges. Exploitation still requires user interaction, as reflected by the UI:R vector.

Which installations are affected?

GlobalPayments WooCommerce plugin versions 1.23.3 and earlier are affected. The provided data does not state whether any particular WordPress or WooCommerce configuration changes exposure.

What impact can successful exploitation have?

Successful XSS can affect confidentiality, integrity, and availability at low impact levels. The scope is changed, meaning the impact can extend beyond the vulnerable component's original security authority.

CVE-2026-118085: WordPress GlobalPayments WooCommerce plugin <= 1.23.3 - Cross Site Scripting (XSS) vulnerability

Event History

Frequently Asked Questions

Who can exploit this issue?

Which installations are affected?

What impact can successful exploitation have?

Company

Resources

Contact

Frequently Asked Questions

Who can exploit this issue?

Which installations are affected?

What impact can successful exploitation have?