A Cross Site Scripting (XSS) vulnerability was found in the Checkout Field Editor for WooCommerce – Checkout Manager plugin, version <= 3.0.5. This issue allows a shop manager to inject malicious scripts, potentially impacting site security. Users should review vendor guidance and consider additional security measures. Evidence is limited; verify with vendor and official records. The vulnerability affects [truncated]
CVE-2026-59556 is an Unauthenticated Cross Site Scripting (XSS) vulnerability in Dynamic Pricing With Discount Rules for WooCommerce plugin versions <= 4.5.11. This vulnerability allows attackers to inject malicious scripts into web pages viewed by other users, potentially leading to unauthorized actions or data breaches. Users of the affected plugin should be aware of this vulnerability and take immediat [truncated]