arosoft CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

HIGH arosoft CVE published 2026-10-31

CVE-2026-119065

The Shipping Zones by Drawing for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'szbd-picked' checkout parameter in versions up to, and including, 3.3.0. This vulnerability allows unauthenticated attackers to inject arbitrary attributes onto the Google Maps link in the WooCommerce admin order view. The szbd_checkout_field_update_order_meta() handler stores user-inpu [truncated]