Advisories · Technology

acowebs Woocommerce Custom Product Addons Pro.

Every CVE that names acowebs Woocommerce Custom Product Addons Pro among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-4001 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Woocommerce Custom Product Addons Pro <= 5.4.1 - Unauthenticated Remote Code Execution via Custom Pricing Formula
- acowebs Woocommerce Custom Product Addons Pro
- Code injection
Not analysed yet 23 Mar 2026