ross Site Scripting (XSS) vulnerability | WordPress.org

MEMT-NETWORK
(@memt-network)

3 months ago

Hi we found this vulnerability

WordPress Product Visibility by Country for WooCommerce plugin <= 1.4.9 – Cross Site Scripting (XSS) vulnerability

We removed the plugin for now, because our site got always hacked, and we didn’t know how because all was updated. So we think it your plugin. while this was already know since 2023, we don’t understand its not patched yet, even if we now also see other users come forward here.

Viewing 1 replies (of 1 total)

Moderator threadi
(@threadi)

3 months ago

The message you mentioned refers to a different plugin, not “Health Check & Troubleshooting”. It’s this one: https://wordpress.org/plugins/product-visibility-by-country-for-woocommerce/ – it appears to have already been disabled in the repository, but it also hasn’t been updated in over three years. If you have any questions about this, please contact their support forum: https://wordpress.org/support/plugin/product-visibility-by-country-for-woocommerce/

Viewing 1 replies (of 1 total)

You must be logged in to reply to this topic.

1 reply
2 participants
Last reply from: threadi
Last activity: 3 months ago
Status: not resolved