CVE-2026-66605

The WooCommerce Variation Swatches for Products plugin versions up to 1.4.13 are vulnerable to unauthenticated Cross Site Scripting (XSS) attacks, allowing attackers to inject malicious scripts that can compromise user sessions or redirect users to harmful sites. This vulnerability poses a significant risk to e-commerce platforms using the affected plugin, particularly those handling sensitive customer data. Website administrators and security teams should prioritize patching or upgrading to mitigate potential exploitation.