Medium 6.4
2025-08-19< 6.4.8
WPC Smart Compare for WooCommerce <= 6.4.7 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting
Minimum safe version
6.4.8
Update to 6.4.8 or later to address 2 fixable vulnerabilities
WPC Smart Compare for WooCommerce <= 6.4.7 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting
WordPress WPC Smart Compare for WooCommerce Plugin <= 6.4.6 is vulnerable to Cross Site Scripting (XSS)