CVE-2026-77188

The Waitlist Woocommerce (Back in stock notifier) plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in versions up to and including 2.9.1 . The root cause is insufficient input sanitization and output escaping of the 'type' shortcode attribute . Because shortcode attribute v...