4.9.0

DATE	CVE	VULNERABILITY TITLE	RISK
2024-04-18	CVE-2023-6892	Cross-site Scripting vulnerability in Wpfactory EAN for Woocommerce The EAN for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'alg_wc_ean_product_meta' shortcode in all versions up to, and including, 4.8.7 due to insufficient input sanitization and output escaping on user supplied attributes. network low complexity wpfactory CWE-79	5.4