CVE-2025-14626: Improper Neutralization of Input During Web Page Generation

The QR Code for WooCommerce order emails, PDF invoices, packing slips plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode in all versions up to, and including, 1.9.42 due to insufficient input sanitization and output escaping on user supplied attributes...

CVE-2025-27322

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Bappa Mal QR Code for WooCommerce wc-qr-codes allows Reflected XSS.This issue affects QR Code for WooCommerce: from n/a through = 1.2.0...

CVE-2025-27322

CVE-2025-27322 — Reflected Cross-Site Scripting in WordPress plugin “QR Code for WooCommerce” (Bappa Mal) up to version 1.2.0. Root cause: improper input neutralization during web page generation. Affected: QR Code for WooCommerce

CVE-2025-27322 WordPress QR Code for WooCommerce Plugin <= 1.2.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Bappa Mal QR Code for WooCommerce wc-qr-codes allows Reflected XSS.This issue affects QR Code for WooCommerce: from n/a through = 1.2.0...

CVE-2025-27322: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Bappa Mal QR Code for WooCommerce wc-qr-codes allows Reflected XSS.This issue affects QR Code for WooCommerce: from n/a through = 1.2.0...