CVE-2026-61987

MEDIO 6.5CVE-2026-61987 · Published 08/11/2026 · updated 08/11/2026

In breve

CVE-2026-61987 è una vulnerabilità MEDIO (CVSS 6.5).
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
—	No affected product versions are listed for this vulnerability yet.

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WC Lovers WCFM – Frontend Manager for WooCommerce wc-frontend-manager allows Stored XSS.This issue affects WCFM – Frontend Manager for WooCommerce: from n/a through 6.8.1.

References

patchstack.com/database/wordpress/plugin/wc-frontend-manager/vulnerability/wordpress-wcfm-frontend-manager-for-woocommerce-plugin-6-8-1-cross-site-scripting-xss-vulnerability

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free