WooCommerce Updated to Address Cross-Site Scripting Vulnerability

The official team at Woo has deployed a critical update for WooCommerce. The update addresses a vulnerability that previously allowed malicious actors to inject malicious content into browsers.The official Woo team has also contacted WooCommerce merchants whose stores may be vulnerable.

This problem is limited to runningThe following WooCommerce versionsboth (... and...)WooCommerce stores that have the order attribute enabled.This feature is enabled by default in WooCommerce:

If running WooCommerce 8.8.0 or later, we highly recommend updating as soon as possible.

What steps should be taken toupdateYour Store

If the correct version is not already installedmanual updateThe

To update the extension:

1. Log in to the store's WP Admin DashboardfurthermoreNavigate toplug-in (software component)The
2. Found in the list of installed plugins and extensionsWooCommerce . You should see a warning prompting"There is a new version of WooCommerce available!".
3. Click on theThe Update Now link will update you to the version8.9.3.

If the WooCommerce update is not immediately available, thethenDisable order attribution. This vulnerability can be exploited only when order attribution is enabled.

Woo developer consultation is available hereRead more about the update, including how to check the version status of the store, in.

What is this vulnerability?

This vulnerability could allowCross-site scripting attacksThis is a type of attack where the attacker manipulates the link to include malicious content on the page (via code such as JavaScript). This can affect anyone who clicks on the link, including customers, merchants or store administrators.

This vulnerability affects any WooCommerce store running WooCommerce 8.8.0, 8.8.1, 8.8.2, 8.8.3, 8.8.4, 8.9.0, 8.9.1, 8.9.2, specifically if the storeOrder attribution enabled(enabled by default). If using an earlier stable update version of WooCommerce, the store will not be affected.

It is recommended to update to the latest patched version of WooCommerce (8.9.3) as soon as possible!

Contact Us
Can't read the tutorial? Contact us for a free answer! Free help for personal, small business sites!	Customer Service
① Tel: 020-2206-9892
② QQ咨询：1025174874
(iii) E-mail: [email protected]
④ Working hours: Monday to Friday, 9:30-18:30, holidays off