Advisories · Technology
acowebs Product Addons for Woocommerce – Product Options with Custom Fields.
Every CVE that names acowebs Product Addons for Woocommerce – Product Options with Custom Fields among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 4.4 Medium
Product Addons for Woocommerce <= 3.1.8 - Authenticated (Shop Manager+) Stored Cross-Site Scripting via 'type' Field Parameter
- acowebs Product Addons for Woocommerce – Product Options with Custom Fields
- Cross-site scripting (XSS)
- CVSS 7.2 High
Product Addons for Woocommerce – Product Options with Custom Fields <= 3.1.0 - Authenticated (Shop Manager+) Code Injection via Conditional Logic 'operator' Parameter
- acowebs Product Addons for Woocommerce – Product Options with Custom Fields
- Code injection