VYPR

EU VAT Assistant for WooCommerce

by WordPress

CVEs (1)

  • CVE-2026-103899HigOct 17, 2026
    risk 0.47cvss 7.2epss —

    The EU VAT Assistant for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'vat_number' parameter in all versions up to, and including, 2.1.30.260413 due to insufficient input sanitization and output escaping. This makes it possible for…