cleantalk
Vulnerabilities and Security Researches

Mini Ajax Cart for WooCommerce, CVE-2026-6370

CVE, Research URL

CVE-2026-6370

Home page URL

Security reports for Mini Ajax Cart for WooCommerce

Application

Mini Ajax Cart for WooCommerce

Published on
Apr 15, 2026
Research Description
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in HashThemes Mini Ajax Cart for WooCommerce allows Stored XSS.This issue affects Mini Ajax Cart for WooCommerce: from n/a through 1.3.4.
Affected versions
max 1.3.5.
Status
vulnerable
Previous vulnerability researches
Additional Custom Product Tabs for WooCommerce (CVE-2025-58985) , Sep 10, 2025
Additional Custom Product Tabs for WooCommerce (CVE-2025-26749) , Apr 15, 2025
Custom Product Tabs For WooCommerce (CVE-2024-12721) , Dec 22, 2024
New vulnerability
MasterStudy LMS WordPress Plugin – for Online Courses and Education (CVE-2026-40766) , May 01, 2026
WP Encryption – One Click Free SSL Certificate & SSL / HTTPS Redirect to Force HTTPS, SSL Score (CVE-2024-13362) , May 01, 2026
Order Delivery Date for WooCommerce (CVE-2026-42386) , May 01, 2026
Best WordPress Gallery Plugin – FooGallery (CVE-2024-13362) , May 01, 2026
Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin (CVE-2026-42384) , May 01, 2026