CVE-2026-34902

7th percentile - higher than 7% of all known CVEs

The WooCommerce Product Table Lite plugin versions up to 4.6.3 contains a vulnerability to unauthenticated Cross Site Scripting (XSS). An attacker can exploit this flaw to inject malicious JavaScript code.

Exploitation of this vulnerability could lead to user data theft or session hijacking, posing a serious security threat to the organization.

It is recommended to update the WooCommerce Product Table Lite plugin to the latest version to mitigate this vulnerability.