The plugin “Variation Swatches for WooCommerce,” installed across 80,000 WordPress-powered retail sites, contains a stored XSS security vulnerability that could allow cyberattackers to inject malicious web scripts and take over sites.