RVCFDI para Woocommerce, CVE-2025-69386
- CVE, Research URL
- Home page URL
- Application
- Published on
- Feb 20, 2026
- Research Description
- Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in realvirtualmx RVCFDI para Woocommerce rvcfdi-para-woocommerce allows Reflected XSS.This issue affects RVCFDI para Woocommerce: from n/a through <= 8.1.8.
- Affected versions
-
max 8.1.8.
- Status
-
vulnerable
| Previous vulnerability researches |
|---|
| SEO Flow by LupsOnline (CVE-2025-48146) , May 18, 2025 |
| SEO Flow by LupsOnline (CVE-2025-15285) , Feb 27, 2026 |