Vidish vulnerabilities

Products

• Category Discount Woocommerce 1
• Combo Offers WooCommerce 1

Latest Vidish CVEs

Newest publication first

1. CVE-2026-96828 WordPress Category Discount Woocommerce plugin <= 5.18 - SQL Injection vulnerability

   Published 2026-09-30

   High·CVSS 7.6 EPSS 0.27%

   Administrator SQL Injection in Category Discount Woocommerce <= 5.18 versions.

2. CVE-2025-69088 WordPress Combo Offers WooCommerce plugin <= 4.2 - Cross Site Scripting (XSS) vulnerability

   Published 2025-12-30

   Medium·CVSS 6.5 EPSS 0.16%

   Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Vidish Combo Offers WooCommerce woo-combo-offers allows DOM-Based XSS.This issue affects Combo Offers WooCommerce: from n/a through <= 4.2.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.