Reflected Cross-Site Scripting Vulnerability in WooCommerce Extractor Plugin for WordPress

CVE-2024-11331

What is CVE-2024-11331?

The Extract Products for WooCommerce plugin in WordPress has a reflected cross-site scripting (XSS) vulnerability due to insufficient input sanitization in the add_query_arg and remove_query_arg functions. This flaw affects all versions up to and including 2.1.3. Unauthenticated attackers can exploit this vulnerability to inject malicious web scripts into web pages. If users are baited into clicking a specially crafted link, their sessions may be compromised or sensitive information may be exposed, posing a severe risk to website integrity and user data privacy.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References