Threat database

CVE-2026-39800 is a high severity vulnerability involving unauthenticated Cross-Site Scripting (XSS) in the Additional Order Filters for WooCommerce plugin by Anton Bond. It affects versions up to and including 1.24. The vulnerability allows an attacker to inject malicious scripts during web page generation without authentication. This can lead to partial compromise of confidentiality, integrity, and availability. No official patch or remediation details are provided in the available data.

Cross-Site Request Forgery (CSRF) vulnerability in Anton Bond Additional Order Filters for WooCommerce additional-order-filters-for-woocommerce allows Stored XSS.This issue affects Additional Order Filters for WooCommerce: from n/a through <= 1.22.