WordPress plugin
Product Addons for Woocommerce – Product Options with Custom Fields security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 2 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical0
- High1
- Medium1
- Low0
All Product Addons for Woocommerce – Product Options with Custom Fields vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| High7.2 | Authenticated (Shop Manager+) Code Injection via Conditional Logic 'operator' Parameter ≤3.1.0Update to 3.1.1 | CVE-2026-2296 |
- High7.2Authenticated (Shop Manager+) Code Injection via Conditional Logic 'operator' Parameter
≤3.1.0Update to 3.1.1
Product Addons for Woocommerce – Product Options with Custom Fields: common questions
Does Product Addons for Woocommerce – Product Options with Custom Fields have known vulnerabilities?
Yes. VulnCrest Radar lists 2 known vulnerabilities in Product Addons for Woocommerce – Product Options with Custom Fields: 1 high, 1 medium. None are known to affect version null.
How do I check which version of Product Addons for Woocommerce – Product Options with Custom Fields I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Product Addons for Woocommerce – Product Options with Custom Fields vulnerability?
CVE-2026-109988, published Oct 27, 2026: Product Addons for Woocommerce <= 3.1.8 - Authenticated (Shop Manager+) Stored Cross-Site Scripting via 'type' Field Parameter. Severity: Medium (CVSS 4.4).
Is any Product Addons for Woocommerce – Product Options with Custom Fields vulnerability listed in CISA KEV?
No. None of the known Product Addons for Woocommerce – Product Options with Custom Fields vulnerabilities is currently listed in the CISA KEV catalog.