CVE-2026-81282

Subscriber Cross Site Scripting (XSS) in Product Variations Swatches for WooCommerce <= 1.1.18 versions.

• Published Sep 3, 2026
• CVSS 6.5 medium
• 0.2% chance of exploitation in the next 30 days (EPSS)

CVE-2026-81282 at the National Vulnerability Database