Back to the CVE list

CVE-2026-77188

Waitlist Woocommerce ( Back in stock notifier ) <= 2.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'type' Shortcode Attribute

CVSS score

6.4

EPSS probability

—

Risk score

0.6

Published

5 h ago

Overview Public Exploits (0)Newsroom Vulnerability Timeline

Related Security News

Articles and analysis bulletins in which the press and security publications have covered this vulnerability:

No verified news item has been matched to this CVE yet.

Similar Vulnerabilities

5.3

CVE-2026-12215OTP Login & Register Woocommerce <= 2.7.2 - Unauthenticated Authentication Bypass via Brute Force

Vendorxootix ProductOTP Login & Register Woocommerce

Patch status unknownEPSS %11 mo ago

4.4

CVE-2026-12402OTP Login & Register Woocommerce <= 2.7.3 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'fb-config' Setting

Vendorxootix ProductOTP Login & Register Woocommerce

Patch status unknownEPSS %01 mo ago

6.5

CVE-2026-114701WordPress Waitlist Woocommerce ( Back in stock notifier ) plugin <= 2.9.1 - Cross Site Scripting (XSS) vulnerability

Vendorxootix ProductWaitlist Woocommerce ( Back in stock notifier )

Patch status unknownEPSS %06 d ago

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

Get a free key Documentation

curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-77188"

CVE-2026-77188 · Waitlist Woocommerce ( Back in stock…