Unknown Ultimate-Woocommerce-Auction-Pro vulnerabilities

2 CVEs affecting Unknown Ultimate-Woocommerce-Auction-Pro, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-4259, published 2026-06-22.

More from Unknown.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2026-4110, published 2026-06-22. Medium severity, CVSS 6.1. EPSS: 0.3% chance of exploitation in the next 30 days. The ultimate-woocommerce-auction-pro WordPress plugin through 2.4.5 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which…
• CVE-2026-4259, published 2026-06-22. High severity, CVSS 7.1. EPSS: 0.3% chance of exploitation in the next 30 days. The ultimate-woocommerce-auction-pro WordPress plugin through 2.4.5 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which…