Advisories · Technology

Wombat Plugins Advanced Product Fields (Product Addons) for WooCommerce.

Every CVE that names Wombat Plugins Advanced Product Fields (Product Addons) for WooCommerce among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-39499 CVE record

CVSS 7.2 High

WordPress Advanced Product Fields (Product Addons) for WooCommerce plugin <= 1.6.19 - PHP Object Injection vulnerability
- Wombat Plugins Advanced Product Fields (Product Addons) for WooCommerce
- Insecure deserialization
Not analysed yet 15 Jun 2026
CVE-2026-32457 CVE record

CVSS 5.3 Medium

WordPress Advanced Product Fields (Product Addons) for WooCommerce plugin <= 1.6.18 - Broken Access Control vulnerability
- Wombat Plugins Advanced Product Fields (Product Addons) for WooCommerce
- Broken access control
Not analysed yet 13 Mar 2026