| Package | Affected versions | Patched versions |
|---|---|---|
| subscriptions | < 2.6.3 | 2.6.3 |
Persistent XSS in the WooCommerce Subscriptions plugin before 2.6.3 for WordPress allows remote attackers to execute arbitrary JavaScript because Billing Details are mishandled in WCS_Admin_Post_Types in class-wcs-admin-post-types.php.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free