WordPress plugin
Advanced Product Fields (Product Addons) for WooCommerce security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 4 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical0
- High1
- Medium3
- Low0
All Advanced Product Fields (Product Addons) for WooCommerce vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| High7.5 | Unauthenticated Improper Input Validation to Price Bypass via Add-to-Cart POST Request ≤1.6.21Update to 1.6.22 | CVE-2026-2996 | |
| Medium6.6 | Authenticated (Shop manager+) PHP Object Injection ≤1.6.19Update to 1.6.20 | CVE-2026-39499 | |
| Medium5.3 | Missing Authorization ≤1.6.18Update to 1.6.19 | CVE-2026-32457 | |
| Medium4.3 | Cross-Site Request Forgery to Product Field Group Duplication and Publication ≤1.6.17Update to 1.6.18 | CVE-2025-13924 |
- High7.5Unauthenticated Improper Input Validation to Price Bypass via Add-to-Cart POST Request
≤1.6.21Update to 1.6.22
- Medium6.6Authenticated (Shop manager+) PHP Object Injection
≤1.6.19Update to 1.6.20
- Medium5.3Missing Authorization
≤1.6.18Update to 1.6.19
- Medium4.3Cross-Site Request Forgery to Product Field Group Duplication and Publication
≤1.6.17Update to 1.6.18
Advanced Product Fields (Product Addons) for WooCommerce: common questions
Does Advanced Product Fields (Product Addons) for WooCommerce have known vulnerabilities?
Yes. VulnCrest Radar lists 4 known vulnerabilities in Advanced Product Fields (Product Addons) for WooCommerce: 1 high, 3 medium. None are known to affect version null.
How do I check which version of Advanced Product Fields (Product Addons) for WooCommerce I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Advanced Product Fields (Product Addons) for WooCommerce vulnerability?
CVE-2026-2996, published Aug 21, 2026: Advanced Product Fields (Product Addons) for WooCommerce <= 1.6.21 - Unauthenticated Improper Input Validation to Price Bypass via Add-to-Cart POST Request. Severity: High (CVSS 7.5).
Is any Advanced Product Fields (Product Addons) for WooCommerce vulnerability listed in CISA KEV?
No. None of the known Advanced Product Fields (Product Addons) for WooCommerce vulnerabilities is currently listed in the CISA KEV catalog.