CVE-2026-39800: WordPress Additional Order Filters for WooCommerce plugin <= 1.24 - Cross Site Scripting (XSS) vulnerability

Q: What level of access does an attacker need to exploit this issue?

No authentication is required. The CVSS vector indicates user interaction is required, so exploitation depends on a user interacting with attacker-controlled content.

Q: Which installations are affected?

Additional Order Filters for WooCommerce versions 1.24 and earlier are affected.

Q: What impact could successful exploitation have?

The vulnerability is rated high severity with low impacts to confidentiality, integrity, and availability. Its scope is changed, indicating the impact can extend beyond the vulnerable plugin's security authority.

Published Oct 10, 2026

Updated

Unauthenticated Cross Site Scripting (XSS) in Additional Order Filters for WooCommerce <= 1.24 versions.

Affected Software

1 affected component

WordPress Additional Order Filters for WooCommerce<=1.24

Event History

Oct 10, 2026

CVE Published

via MITRE·07:34 PM

Data Sourced

via MITRE·07:34 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·08:16 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

No authentication is required. The CVSS vector indicates user interaction is required, so exploitation depends on a user interacting with attacker-controlled content.

Which installations are affected?

Additional Order Filters for WooCommerce versions 1.24 and earlier are affected.

What impact could successful exploitation have?

The vulnerability is rated high severity with low impacts to confidentiality, integrity, and availability. Its scope is changed, indicating the impact can extend beyond the vulnerable plugin's security authority.

CVE-2026-39800: WordPress Additional Order Filters for WooCommerce plugin <= 1.24 - Cross Site Scripting (XSS) vulnerability

Affected Software

Event History

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

Which installations are affected?

What impact could successful exploitation have?

Company

Resources

Contact

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

Which installations are affected?

What impact could successful exploitation have?