CVE-2026-77188

The Waitlist Woocommerce Back in stock notifier plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'type' Shortcode Attribute in all versions up to, and including, 2.9.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated...

CVE-2026-77188

The Waitlist Woocommerce (Back in stock notifier) plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in versions up to and including 2.9.1 . The root cause is insufficient input sanitization and output escaping of the 'type' shortcode attribute . Because shortcode attribute v...

CVE-2026-77188 Waitlist Woocommerce ( Back in stock notifier ) <= 2.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'type' Shortcode Attribute

The Waitlist Woocommerce Back in stock notifier plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'type' Shortcode Attribute in all versions up to, and including, 2.9.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated...

EUVD-2026-111749

The Waitlist Woocommerce Back in stock notifier plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'type' Shortcode Attribute in all versions up to, and including, 2.9.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated...

PT-2026-127892

The Waitlist Woocommerce Back in stock notifier plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'type' Shortcode Attribute in all versions up to, and including, 2.9.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated...

WordPress Waitlist Woocommerce ( Back in stock notifier ) plugin <= 2.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Wordfence PRISM in WordPress Plugin Waitlist Woocommerce Back in stock notifier versions = 2.9.1...

CVE-2026-114701

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in xootix Waitlist Woocommerce Back in stock notifier waitlist-woocommerce allows Stored XSS.This issue affects Waitlist Woocommerce Back in stock notifier : from n/a through 2.9.1...

CVE-2026-114701

The xootix Waitlist Woocommerce ( Back in stock notifier ) WordPress plugin is vulnerable to Stored Cross-Site Scripting (XSS) . This issue affects versions up to and including 2.9.1 due to the improper neutralization of input during web page generation. While the documents confirm the existence ...

CVE-2026-114701 WordPress Waitlist Woocommerce ( Back in stock notifier ) plugin <= 2.9.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in xootix Waitlist Woocommerce Back in stock notifier waitlist-woocommerce allows Stored XSS.This issue affects Waitlist Woocommerce Back in stock notifier : from n/a through 2.9.1...

EUVD-2026-108082

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in xootix Waitlist Woocommerce Back in stock notifier waitlist-woocommerce allows Stored XSS.This issue affects Waitlist Woocommerce Back in stock notifier : from n/a through 2.9.1...

CVE-2026-114701 WordPress Waitlist Woocommerce ( Back in stock notifier ) plugin <= 2.9.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in xootix Waitlist Woocommerce Back in stock notifier waitlist-woocommerce allows Stored XSS.This issue affects Waitlist Woocommerce Back in stock notifier : from n/a through 2.9.1...

WordPress Waitlist Woocommerce ( Back in stock notifier ) plugin <= 2.9.1 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Waitlist Woocommerce Back in stock notifier versions = 2.9.1...

PT-2026-121314

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in xootix Waitlist Woocommerce Back in stock notifier waitlist-woocommerce allows Stored XSS.This issue affects Waitlist Woocommerce Back in stock notifier : from n/a through 2.9.1...

xootix waitlist woocommerce cross-site scripting vulnerability

xootix waitlist woocommerce versions 2.9.1 and earlier contain a cross-site scripting vulnerability. This vulnerability stems from improper input handling during web page generation and may lead to stored cross-site scripting attacks...

CVE-2024-8724

The Waitlist Woocommerce Back in stock notifier plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 2.7.5. This makes it possible for unauthenticated attackers to inject...

CVE-2024-43134

Missing Authorization vulnerability in xootix Waitlist Woocommerce Back in stock notifier allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Waitlist Woocommerce Back in stock notifier : from n/a through 2.6...

CVE-2024-43134 WordPress Waitlist Woocommerce plugin <= 2.6 - Broken Access Control vulnerability

Missing Authorization vulnerability in xootix Waitlist Woocommerce Back in stock notifier allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Waitlist Woocommerce Back in stock notifier : from n/a through 2.6...

CVE-2024-43134 WordPress Waitlist Woocommerce plugin <= 2.6 - Broken Access Control vulnerability

Missing Authorization vulnerability in xootix Waitlist Woocommerce Back in stock notifier allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Waitlist Woocommerce Back in stock notifier : from n/a through 2.6...

CVE-2024-43134: Missing Authorization

Missing Authorization vulnerability in xootix Waitlist Woocommerce Back in stock notifier allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Waitlist Woocommerce Back in stock notifier : from n/a through 2.6...

PT-2024-30323 · WordPress · Waitlist Woocommerce

Name of the Vulnerable Software and Affected Versions: Waitlist Woocommerce Back in stock notifier versions n/a through 2.6 Description: The issue affects the Waitlist Woocommerce Back in stock notifier plugin due to a Missing Authorization vulnerability. This vulnerability allows exploitation of...