CVE-2026-39758

Unauthenticated Cross Site Scripting (XSS) vulnerabilities in Midtrans-WooCommerce versions up to 2.32.3 allow attackers to inject malicious scripts into web pages viewed by users, potentially leading to session hijacking or data theft. Organizations using affected versions of this plugin should prioritize patching to mitigate the risk of exploitation and protect user data.