XSS Vulnerability in WordPress Min Max Step Quantity Limits Manager for WooCommerce Plugin

Vulnerability Overview Vulnerability Name: Cross-Site Scripting (XSS) vulnerability of medium priority in WordPress Min Max Step Quantity Limits Manager for WooCommerce Plugin <= 5.2.2. Vulnerability Type: Cross-Site Scripting (XSS). Priority: Medium. Affected Scope Affected Versions: <= 5.2.2. Fixed Versions: 5.2.3 or higher. Risk Description: This vulnerability allows malicious attackers to inject malicious scripts, such as redirects, ads, and other HTML payloads, which will execute when visitors access the website. Remediation 1. Automatic Mitigation: Use the automatic mitigation feature provided by Patchstack to block any attacks until an update to the patched version. 2. Manual Update: Update to version 5.2.3 or higher to resolve the vulnerability. Patchstack users can enable automatic updates. Detailed Information Software: Min Max Step Quantity Limits Manager for WooCommerce. Type: Plugin. Vulnerable Versions: <= 5.2.2. Fixed Version: 5.2.3. Timeline Report Date: February 20, 2026. Reporter: HiveSec. Additional Information User Interaction Required: Requires privileged user actions, such as clicking a malicious link, accessing a spoofed page, or submitting a form. CVSS Score: A standardized and repeatable method for assessing and ranking reported vulnerabilities, but not applicable to WordPress. Contact Subscription: Receive weekly WordPress security intelligence via email. Footer Information Navigation Links: Pricing, Case Studies, Login, Trial, etc. Resources: Partners, Vulnerability Database, Whitepapers, Case Studies, Webinars, LinkedIn, Facebook, X, etc. Legal Information: Privacy Policy, Accessibility, Terms and Conditions, etc. Summary This is a medium-priority Cross-Site Scripting (XSS) vulnerability affecting the WordPress Min Max Step Quantity Limits Manager for WooCommerce plugin versions <= 5.2.2. It is recommended to update to version 5.2.3 or higher immediately, or use Patchstack's automatic mitigation feature for protection.

Goal Reached Thanks to every supporter — we hit 100%!

XSS Vulnerability in WordPress Min Max Step Quantity Limits Manager for WooCommerce Plugin