eu_vat_assistant_for_woocommerce vulnerabilities

CVEs whose affected-version data names the eu_vat_assistant_for_woocommerce package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-103899High· 7.2

yesterday

EU VAT Assistant for WooCommerce <= 2.1.30.260413 - Unauthenticated Stored Cross-Site Scripting via 'vat_number' Parameter

The EU VAT Assistant for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'vat_number' parameter in all versions up to, and including, 2.1.30.260413 due to insufficient input sanitization and output e…

▾ Twilightdaigo75 · EU VAT Assistant for WooCommerceEPSS 0.24%via CVEORG