CVE-2026-104926 | meHigh WooCommerce Extra Product Options Pro Plugin up to 3.3.2 on WordPress _start/_end cross site scripting

October 31, 2026 Yanac

A vulnerability described as problematic has been identified in meHigh WooCommerce Extra Product Options Pro Plugin up to 3.3.2 on WordPress. The impacted element is an unknown function. The manipulation of the argument _start/_end results in cross site scripting.

This vulnerability is identified as CVE-2026-104926. The attack can be executed remotely. There is not any exploit available.VulDB Recent EntriesRead More