PT-2026-68604 · WordPress · Woocommerce Multilingual & Multicurrency

CVE-2026-66711

·

Published

2026-08-06

·

Updated

2026-08-06

CVSS v3.1

7.1

High

VectorAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L
Name of the Vulnerable Software and Affected Versions WooCommerce Multilingual & Multicurrency versions prior to 5.5.7
Description Cross Site Scripting (XSS) allows users with Subscriber privileges to execute malicious scripts in the browser of other users.
Recommendations Update to a version newer than 5.5.6.

Fix

XSS

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2026-66711

Affected Products

Woocommerce Multilingual & Multicurrency