CVE WATCH / VULNERABILITY DETAIL
CVE-2026-77188
MEDIUMCVSS 6.4NVD feed
Published 28 October 2026 · tracked since 29 October 2026
Description
The Waitlist Woocommerce ( Back in stock notifier ) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'type' Shortcode Attribute in all versions up to, and including, 2.9.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attack
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog
Latest tracked vulnerabilities
- CVE-2025-30414 HIGH 7.1
- CVE-2026-92797 HIGH 8.8
- CVE-2026-101935 MEDIUM 6.1
- CVE-2026-76780 MEDIUM 6.3
- CVE-2026-77871 MEDIUM 6.4
- CVE-2026-92098 MEDIUM 6.1
- CVE-2026-76005 MEDIUM 6.5
- CVE-2026-118164 MEDIUM 6.4
- CVE-2026-116609 MEDIUM 6.5
- CVE-2026-116749 MEDIUM 6.4