CVE-2026-28154: Snstheme M.anh - Fashion Woocoommerce WordPress Theme

High severity, CVSS 7.1. EPSS: 0.3% chance of exploitation in the next 30 days.

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in snstheme Samex - Clean, Minimal Shop WooCommerce WordPress Theme and snstheme M.Anh - Fashion WooCoommerce WordPress Theme allows Reflected XSS. This issue affects Samex - Clean, Minimal Shop WooCommerce WordPress Theme: from n/a through 2.5; M.Anh - Fashion WooCoommerce WordPress Theme: from n/a through 1.7.

Affected products

• Snstheme M.anh - Fashion Woocoommerce WordPress Theme: up to and including 1.7
• Snstheme Samex - Clean, Minimal Shop Woocommerce WordPress Theme: up to and including 2.5

Published 2026-08-13. Last modified 2026-08-14.