CVE-2026-81282

The vulnerability affects the Product Variations Swatches plugin for WooCommerce versions up to 1.1.18, allowing for Subscriber-level Cross Site Scripting (XSS) attacks. This could enable attackers to inject malicious scripts into web pages viewed by other users, potentially compromising user data and site integrity. E-commerce site administrators using this plugin should prioritize patching to mitigate the risk of exploitation.