CVE-2021-42363

MEDIO 6.1CVE-2021-42363 · Published 19/11/2021 · updated 17/06/2026

In breve

CVE-2021-42363 è una vulnerabilità MEDIO (CVSS 6.1) che riguarda preview e-mails for woocommerce (preview e-mails for woocommerce project).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 1.2%, superiore al 67.6% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
preview e-mails for woocommerce preview_e-mails_for_woocommerce_project	`≤ 1.6.8`	No fix yet

Description

The Preview E-Mails for WooCommerce WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the search_order parameter found in the ~/views/form.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 1.6.8.

References

plugins.trac.wordpress.org/changeset/2625941/woo-preview-emails/trunk/views/form.php · Patch
wordfence.com/blog/2021/11/woocommerce-extension-reflected-xss-vulnerability · Exploit
wordfence.com/vulnerability-advisories · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free