CVE Catalog
CVE-2026-39437
HighCVSS 7.1Exploitation Probability (EPSS)
Low risk0.25%
16th percentile — higher than 16% of all known CVEs
Summary
Versions of Min Max Step Quantity Limits Manager for WooCommerce up to 5.2.2 are vulnerable to unauthenticated Cross Site Scripting (XSS). An attacker can exploit this vulnerability to inject malicious scripts.
Risk Assessment
This vulnerability may lead to user data theft and session hijacking, posing a serious threat to the security of the application and customer data.
Recommendation
It is recommended to update the Min Max Step Quantity Limits Manager plugin to the latest version to mitigate this vulnerability.
Original NVD description (English source)
Unauthenticated Cross Site Scripting (XSS) in Min Max Step Quantity Limits Manager for WooCommerce <= 5.2.2 versions.