Vulnerabilities

TI-2026-28473 CVE-2026-39499 · GHSA-gr67-hjv8-58w8

WordPress Advanced Product Fields (Product Addons) for WooCommerce plugin <= 1.6.19 - PHP Object Injection vulnerability

LOW 34

Shop manager PHP Object Injection in Advanced Product Fields (Product Addons) for WooCommerce <= 1.6.19 versions.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00446 Published 2026-06-15 No fix listed CWE-502

TI-2026-24985 CVE-2026-32457 · GHSA-h8jm-wwc9-qxgj

Missing authorization in Wombat Plugins Advanced Product Fields for WooCommerce

LOW 29

Missing Authorization vulnerability in Wombat Plugins Advanced Product Fields (Product Addons) for WooCommerce advanced-product-fields-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Leve…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00181 Published 2026-03-13 No fix listed CWE-862

TI-2025-22961 CVE-2025-31824 · GHSA-gqq6-pwhg-228f

WordPress WP Optin Wheel Plugin <= 1.4.7 - Server Side Request Forgery (SSRF) vulnerability

LOW 24

Server-Side Request Forgery (SSRF) vulnerability in Wombat Plugins WP Optin Wheel wp-optin-wheel allows Server Side Request Forgery.This issue affects WP Optin Wheel: from n/a through <= 1.4.7.

CVSS 3.1MEDIUM 5.4 Network No auth No interaction EPSS 0.00337 Published 2025-04-01 No fix listed CWE-918

Vulnerabilities

Filters

WordPress Advanced Product Fields (Product Addons) for WooCommerce plugin <= 1.6.19 - PHP Object Injection vulnerability

Missing authorization in Wombat Plugins Advanced Product Fields for WooCommerce

WordPress WP Optin Wheel Plugin <= 1.4.7 - Server Side Request Forgery (SSRF) vulnerability