CVE-2024-8716

🗓️ 24 Sep 2024 01:56:46Reported by WordfenceType

The XT Ajax Add To Cart for WooCommerce plugin is vulnerable to Reflected Cross-Site Scripting, allowing unauthenticated attackers to inject arbitrary web scripts

Reporter	Title	Published	Views	Family All 12
Circl	CVE-2024-8716	24 Sep 202404:51	–	circl
CNNVD	WordPress plugin XT Ajax Add To Cart for WooCommerce 跨站脚本漏洞	23 Sep 202400:00	–	cnnvd
Cvelist	CVE-2024-8716 XT Ajax Add To Cart for WooCommerce <= 1.1.2 - Reflected Cross-Site Scripting	24 Sep 202401:56	–	cvelist
EUVD	EUVD-2024-49368	3 Oct 202520:07	–	euvd
NVD	CVE-2024-8716	24 Sep 202402:15	–	nvd
OSV	CVE-2024-8716	24 Sep 202402:15	–	osv
Patchstack	WordPress XT Ajax Add To Cart for WooCommerce Plugin <= 1.1.2 is vulnerable to Cross Site Scripting (XSS)	24 Sep 202400:00	–	patchstack
Patchstack	WordPress XT Ajax Add To Cart for WooCommerce plugin <= 1.1.2 - Reflected Cross-Site Scripting vulnerability	24 Sep 202400:55	–	patchstack
Positive Technologies	PT-2024-39196 · WordPress · Xt Ajax Add To Cart For Woocommerce	23 Sep 202400:00	–	ptsecurity
RedhatCVE	CVE-2024-8716	23 May 202507:18	–	redhatcve

NVD

Vulners

Node

xplodedthemes xt_ajax_add_to_cart_for_woocommerceRange<1.1.3wordpress

[
  {
    "vendor": "xplodedthemes",
    "product": "XT Ajax Add To Cart for WooCommerce",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThanOrEqual": "1.1.2",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
plugins	www.plugins.trac.wordpress.org/changeset/3151911/xt-woo-ajax-add-to-cart/tags/1.1.3/xt-framework/includes/class-system-status.php
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/a003129b-4a31-40f8-a9b2-9d3a3286cabe
plugins	www.plugins.trac.wordpress.org/browser/xt-woo-ajax-add-to-cart/tags/1.1.2/xt-framework/includes/class-system-status.php

08 Apr 2026 17:12Current

6.3Medium risk

Vulners AI Score6.3

CVSS 3.16.1

EPSS0.01422

SSVC

CWE-79