CVE-2026-66475

The Checkout Field Editor for WooCommerce versions up to 3.0.5 are vulnerable to a Cross Site Scripting (XSS) attack, allowing attackers to inject malicious scripts into web pages viewed by users. This vulnerability could lead to unauthorized actions or data exposure, impacting both site administrators and customers. E-commerce site operators using affected versions should prioritize patching this vulnerability to safeguard their platforms and user data.