CVE-2026-97292

Author Cross Site Scripting (XSS) in YITH WooCommerce Tab Manager <= 2.15.0 versions.

Published Sep 30, 2026
CVSS 6.5 medium
0.1% chance of exploitation in the next 30 days (EPSS)

Affected software

YITHEMES YITH WooCommerce Tab Manager

CVE-2026-97292 at the National Vulnerability Database