CVE-2021-42363

MITTEL 6.1CVE-2021-42363 · Published 19/11/2021 · updated 17/06/2026

Kurz gesagt

CVE-2021-42363 ist eine Schwachstelle (MITTEL (CVSS 6.1)) in preview e-mails for woocommerce (preview e-mails for woocommerce project).
Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 1.2%, höher als bei 67.6% aller Schwachstellen.
Noch keine gepatchte Version bekannt: Herstellerhinweise unter Referenzen verfolgen.

Package	Affected versions	Patched versions
preview e-mails for woocommerce preview_e-mails_for_woocommerce_project	`≤ 1.6.8`	No fix yet

Description

The Preview E-Mails for WooCommerce WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the search_order parameter found in the ~/views/form.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 1.6.8.

References

plugins.trac.wordpress.org/changeset/2625941/woo-preview-emails/trunk/views/form.php · Patch
wordfence.com/blog/2021/11/woocommerce-extension-reflected-xss-vulnerability · Exploit
wordfence.com/vulnerability-advisories · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free