plugin

In Stock Mailer For Woocommerce Vulnerabilities

2 known security issues reported for the In Stock Mailer For Woocommerce WordPress plugin. Most recent disclosed Mar 26, 2025.

1 medium

Running In Stock Mailer For Woocommerce on your site? Check whether your installed version is affected.

Scan your site free

In Stock Mailer for WooCommerce [in-stock-mailer-for-woocommerce] <= 2.1.1 (unfixed + closed)

unknown

[en] Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound In Stock Mailer for WooCommerce allows Reflected XSS. This issue affects In Stock Mailer for WooCommerce: from n/a through 2.1.1.

Affected:
up to 2.1.1
Fix:
No patched version reported
Disclosed:
Mar 26, 2025

CVE-2025-26566 on NVD →

In Stock Mailer for WooCommerce <= 2.1.1 - Reflected Cross-Site Scripting

medium

The In Stock Mailer for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in versions up to, and including, 2.1.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they...

CVSS:
6.1
Affected:
up to 2.1.1
Fix:
No patched version reported
Disclosed:
Mar 11, 2025

CVE-2025-26566 on NVD →

Protect your WordPress site

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free

← Back to the vulnerability database