Advisories · Technology

Dotstore Extra Fees Plugin for WooCommerce.

Every CVE that names Dotstore Extra Fees Plugin for WooCommerce among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-116866 CVE record

CVSS 8.8 High

WordPress Extra Fees Plugin for WooCommerce plugin <= 4.4.0 - PHP Object Injection vulnerability
- Dotstore Extra Fees Plugin for WooCommerce
- Insecure deserialization
Not analysed yet 29 Oct 2026
CVE-2026-39671 CVE record

CVSS 7.1 High

WordPress Extra Fees Plugin for WooCommerce plugin <= 4.3.3 - Cross Site Request Forgery (CSRF) vulnerability
- Dotstore Extra Fees Plugin for WooCommerce
- Cross-site request forgery (CSRF)
Not analysed yet 8 Apr 2026