CVE-2026-95608: WordPress HUSKY plugin <= 1.4.3.2 - Cross Site Scripting (XSS) vulnerability

Q: Which installations are affected?

HUSKY woocommerce-products-filter versions through 1.4.3.2 are affected. The available data does not identify a fixed version.

Q: What does an attacker need to exploit this issue?

The vector is network-accessible, requires low attack complexity, and does not require attacker privileges. Exploitation requires user interaction, consistent with reflected XSS.

Q: What impact can successful exploitation have?

The supplied severity vector indicates low impacts to confidentiality, integrity, and availability, with scope changed. The issue is a reflected cross-site scripting vulnerability.

Published Oct 9, 2026

Updated

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PluginUs.Net HUSKY woocommerce-products-filter allows Reflected XSS.This issue affects HUSKY: from n/a through 1.4.3.2.

Affected Software

1 affected component

PluginUs.Net HUSKY woocommerce-products-filter<=1.4.3.2

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade PluginUs.Net HUSKY woocommerce-products-filter to a version that resolves this vulnerability.
Fixed in 1.4.4

Event History

Oct 9, 2026

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

RemedyDescriptionSeverityWeakness

Frequently Asked Questions

Which installations are affected?

HUSKY woocommerce-products-filter versions through 1.4.3.2 are affected. The available data does not identify a fixed version.

What does an attacker need to exploit this issue?

The vector is network-accessible, requires low attack complexity, and does not require attacker privileges. Exploitation requires user interaction, consistent with reflected XSS.

What impact can successful exploitation have?

The supplied severity vector indicates low impacts to confidentiality, integrity, and availability, with scope changed. The issue is a reflected cross-site scripting vulnerability.

CVE-2026-95608: WordPress HUSKY plugin <= 1.4.3.2 - Cross Site Scripting (XSS) vulnerability

Affected Software

Remediation

Event History

Frequently Asked Questions

Which installations are affected?

What does an attacker need to exploit this issue?

What impact can successful exploitation have?

Company

Resources

Contact

Frequently Asked Questions

Which installations are affected?

What does an attacker need to exploit this issue?

What impact can successful exploitation have?