Skip to content
OpenAdvisories

Vendor

acowebs

14 known vulnerabilities.

Products

Dynamic Pricing With Discount Rules for WooCommerce 3 Product Addons for Woocommerce – Product Options with Custom Fields 2 PDF Invoices and Packing Slips For WooCommerce 2 Product Table For WooCommerce 2 Wishlist and Save for later for Woocommerce 1 Product Labels For Woocommerce (Sale Badges) 1 Woocommerce Custom Product Addons Pro 1 Product Labels For Woocommerce 1 Checkout Field Editor for WooCommerce – Checkout Manager 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2026-4001 Public exploit

    Woocommerce Custom Product Addons Pro <= 5.4.1 - Unauthenticated Remote Code Execution via Custom Pricing Formula

    The Woocommerce Custom Product Addons Pro plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 5.4.1 via the custom pricing formula eval() in the process_custom_formula() function within includes/process/price.php.…

    acowebs Woocommerce Custom Product Addons Pro Web / CMS