| Package | Affected versions | Patched versions |
|---|---|---|
| product list widget for woocommerce | ≤ 1.0 |
The Product list Widget for Woocommerce WordPress plugin through 1.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against both unauthenticated and authenticated users (such as high privilege one like admin).
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free