PatchSiren

PAYCOMET CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

HIGH PAYCOMET CVE published 2026-10-17

CVE-2026-109701

A Cross-site Scripting (XSS) vulnerability exists in PAYCOMET for WooCommerce, affecting versions from n/a through 5.45. This issue allows for Reflected XSS. The CVE record was published on 2026-10-17T17:16:28.973Z and has not been modified since then. Defenders responsible for WooCommerce installations using PAYCOMET for WooCommerce should assess exposure and prioritize verification and remediation effor [truncated]