← All advisories

High severity7.1NVD Advisory· Published Jul 2, 2026· Updated Jul 2, 2026

CVE-2026-57358

CVE-2026-57358

Description

Unauthenticated Cross Site Scripting (XSS) in Customize My Account for WooCommerce <= 4.3.9 versions.

Affected products

1

WordPress/Customize My Account For Woocommercellm-fuzzy
Range: <=4.3.9
Package: https://wordpress.org/plugins/customize-my-account-for-woocommerce

Patches

Vulnerability mechanics

References

1

patchstack.com/database/wordpress/plugin/customize-my-account-for-woocommerce/vulnerability/wordpress-customize-my-account-for-woocommerce-plugin-4-3-9-reflected-cross-site-scripting-xss-vulnerabilitynvd

News mentions

0

No linked articles in our index yet.