← All advisories

High severity7.1NVD Advisory· Published May 28, 2023· Updated Jun 17, 2026

CVE-2023-33332

CVE-2023-33332

Description

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in WooCommerce Product Vendors plugin <= 2.1.76 versions.

Affected products

3

Woocommerce Product Vendors Project/Woocommerce Product Vendors
cpe:2.3:a:woocommerce_product_vendors_project:woocommerce_product_vendors:*:*:*:*:*:wordpress:*:*
Range: <=2.1.76
WordPress/WooCommerce Product Vendorsllm-fuzzy
Range: <=2.1.76
WooCommerce/Product Vendorscpe-rescue
Range: n/a

Patches

Vulnerability mechanics

References

1

patchstack.com/database/vulnerability/woocommerce-product-vendors/wordpress-woocommerce-product-vendors-plugin-2-1-76-reflected-cross-site-scripting-xss-vulnerabilitynvdThird Party Advisory

News mentions

0

No linked articles in our index yet.