Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9
Exploited now
Wombat Plugins records in CISA KEVNo Wombat Plugins vulnerabilities are listed in CISA KEV.
Priority LOW 34
Shop manager PHP Object Injection in Advanced Product Fields (Product Addons) for WooCommerce <= 1.6.19 versions.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.00446 · Published 2026-06-15 · No fix listed CWE-502
Priority LOW 29
Missing Authorization vulnerability in Wombat Plugins Advanced Product Fields (Product Addons) for WooCommerce advanced-product-fields-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Leve…
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00181 · Published 2026-03-13 · No fix listed CWE-862
Priority LOW 24
Server-Side Request Forgery (SSRF) vulnerability in Wombat Plugins WP Optin Wheel wp-optin-wheel allows Server Side Request Forgery.This issue affects WP Optin Wheel: from n/a through <= 1.4.7.
CVSS 3.1MEDIUM 5.4· Network · No auth · No interaction · EPSS 0.00337 · Published 2025-04-01 · No fix listed CWE-918
THREATIST.IORead the docs