CVE WATCH / VULNERABILITY DETAIL
CVE-2026-111601
MEDIUMCVSS 6.1NVD feed
Published 17 October 2026 · tracked since 17 October 2026
Description
The Hippoo Mobile App for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'token_id' parameter in all versions up to, and including, 1.12.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inj
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog
Latest tracked vulnerabilities
- CVE-2026-109983 MEDIUM 6.4
- CVE-2026-110253 MEDIUM 5.4
- CVE-2026-111110 HIGH 7.2
- CVE-2026-100316 HIGH 7.2
- CVE-2026-110384 HIGH 7.1
- CVE-2026-92715 MEDIUM 4.3
- CVE-2026-92798 HIGH 8.1
- CVE-2026-92978 MEDIUM 4.3
- CVE-2026-96660 HIGH 7.2
- CVE-2026-110268 MEDIUM 4.9