Cross-Site Scripting Vulnerability in Active Products Tables for WooCommerce by RealMag777
CVE-2026-57409

7.1HIGH

Key Information:

Vendor

WordPress
Status
Active Products Tables For WooCommerce
Vendor
CVE Published:
13 July 2026

What is CVE-2026-57409?

A Cross-Site Scripting (XSS) vulnerability exists in the Active Products Tables for WooCommerce plugin, developed by RealMag777. This issue stems from improper neutralization of user input during web page generation, allowing attackers to execute arbitrary JavaScript in the context of the affected users' browsers. The vulnerability affects versions up to and including 1.1.0 of the plugin, potentially compromising the security of WooCommerce sites that utilize this tool.

Affected Version(s)

Active Products Tables for WooCommerce 0 <= 1.1.0

References

https://patchstack.com/database/Wordpress/Plugin/profit-p...
vdb-entry

CVSS V3.1

Score:
7.1
Severity:
HIGH
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

hhhai | Patchstack Bug Bounty Program
.