Wpfactory Min Max Step Quantity Limits Manager For Woocommerce vulnerabilities

2 CVEs affecting Wpfactory Min Max Step Quantity Limits Manager For Woocommerce, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-39437, published 2026-06-16.

More from Wpfactory.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2026-39437, published 2026-06-16. High severity, CVSS 7.1. EPSS: 0.3% chance of exploitation in the next 30 days. Unauthenticated Cross Site Scripting (XSS) in Min Max Step Quantity Limits Manager for WooCommerce <= 5.2.2 versions.
• CVE-2025-49510, published 2025-06-10. Medium severity, CVSS 4.3. EPSS: 0.2% chance of exploitation in the next 30 days. Cross-Site Request Forgery (CSRF) vulnerability in WPFactory Min Max Step Quantity Limits Manager for WooCommerce product-quantity-for-woocommerce allows Cross Site Request Forgery.This issue affects…