LIVE GLOBAL MONITOR: 1 JURISDICTION ACTIVE

Oct 19, 2026 · 16:05 UTC SEARCH

HACKCURRENT Cybersecurity Intelligence

HIGH

Vulnerability intelligence

CVE-2026-78283

Published September 3, 2026

CVSS 3.17.1

SeverityHigh

Known exploitedNo

Unauthenticated Cross Site Scripting (XSS) in Music Player for WooCommerce <= 1.8.9 versions.

NVD references:

https://patchstack.com/database/wordpress/plugin/music-player-for-woocommerce/vulnerability/wordpress-music-player-for-woocommerce-plugin-1-8-9-cross-site-scripting-xss-vulnerability?_s_id=cve

Primary source: NIST National Vulnerability Database