CVE-2022-1546: Visser Woocommerce - Product Importer

Medium severity, CVSS 6.1. EPSS: 0.8% chance of exploitation in the next 30 days.

The WooCommerce - Product Importer WordPress plugin through 1.5.2 does not sanitise and escape the imported data before outputting it back in the page, leading to a Reflected Cross-Site Scripting

Affected products

• Visser Woocommerce - Product Importer: up to and including 1.5.2

Published 2022-07-11. Last modified 2026-06-17.