CVE-2026-96814 is an unauthenticated cross-site scripting (XSS) vulnerability in WooCommerce Product Table Lite versions up to 5.6.7. The flaw arises from improper neutralization of input during web page generation, classified under CWE-79. The vulnerability has a CVSS 3.1 score of 7.1, indicating high severity, with network attack vector, low attack complexity, no privileges required, user interaction required, and scope changed. Exploitation can result in partial loss of confidentiality, integrity, and availability.

An attacker can exploit this vulnerability remotely without authentication to execute malicious scripts in the context of the victim's browser. This can lead to partial compromise of confidentiality, integrity, and availability of the affected system or user data. The scope of impact is changed, meaning the vulnerability affects resources beyond the initially vulnerable component.

No official patch or remediation information is provided in the available data. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should consider disabling the affected plugin or applying any vendor-recommended temporary mitigations if available.