Skip to content
OpenAdvisories

Vendor

acowebs

14 known vulnerabilities.

Products

Dynamic Pricing With Discount Rules for WooCommerce 3 Product Addons for Woocommerce – Product Options with Custom Fields 2 PDF Invoices and Packing Slips For WooCommerce 2 Product Table For WooCommerce 2 Wishlist and Save for later for Woocommerce 1 Product Labels For Woocommerce (Sale Badges) 1 Woocommerce Custom Product Addons Pro 1 Product Labels For Woocommerce 1 Checkout Field Editor for WooCommerce – Checkout Manager 1
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • High 7.1
    CVE-2026-59556

    WordPress Dynamic Pricing With Discount Rules for WooCommerce plugin <= 4.5.11 - Cross Site Scripting (XSS) vulnerability

    Unauthenticated Cross Site Scripting (XSS) in Dynamic Pricing With Discount Rules for WooCommerce <= 4.5.11 versions.

    acowebs Dynamic Pricing With Discount Rules for WooCommerce Web / CMS
  • High 7.2
    CVE-2026-2296

    Product Addons for Woocommerce – Product Options with Custom Fields <= 3.1.0 - Authenticated (Shop Manager+) Code Injection via Conditional Logic 'operator' Parameter

    The Product Addons for Woocommerce – Product Options with Custom Fields plugin for WordPress is vulnerable to Code Injection in all versions up to, and including, 3.1.0. This is due to insufficient input validation of the 'operator' field in conditional logic…

    acowebs Product Addons for Woocommerce – Product Options with Custom Fields Web / CMS
  • High 8.8
    CVE-2025-62008

    WordPress Product Table For WooCommerce plugin <= 1.2.4 - PHP Object Injection vulnerability

    Deserialization of Untrusted Data vulnerability in acowebs Product Table For WooCommerce product-table-for-woocommerce.This issue affects Product Table For WooCommerce: from n/a through <= 1.2.4.

    acowebs Product Table For WooCommerce Web / CMS
  • High 7.6
    CVE-2025-47544

    WordPress Dynamic Pricing With Discount Rules for WooCommerce plugin <= 4.5.8 - SQL Injection Vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in acowebs Dynamic Pricing With Discount Rules for WooCommerce aco-woo-dynamic-pricing allows Blind SQL Injection.This issue affects Dynamic Pricing With Discou…

    acowebs Dynamic Pricing With Discount Rules for WooCommerce Web / CMS
  • High 7.6
    CVE-2024-53817

    WordPress Acowebs Product Labels For Woocommerce plugin <= 1.5.8 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in acowebs Product Labels For Woocommerce aco-product-labels-for-woocommerce allows Blind SQL Injection.This issue affects Product Labels For Woocommerce: from …

    acowebs Product Labels For Woocommerce Web / CMS
  • High 8.2
    CVE-2024-30230

    WordPress PDF Invoices and Packing Slips For WooCommerce plugin <= 1.3.7 - PHP Object Injection vulnerability

    Deserialization of Untrusted Data vulnerability in Acowebs PDF Invoices and Packing Slips For WooCommerce.This issue affects PDF Invoices and Packing Slips For WooCommerce: from n/a through 1.3.7.

    acowebs PDF Invoices and Packing Slips For WooCommerce Web / CMS
  • High 8.8
    CVE-2024-1773

    PDF Invoices and Packing Slips For WooCommerce <= 1.3.7 - Authenticated (Subscriber+) PHP Object Injection

    The PDF Invoices and Packing Slips For WooCommerce plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.3.7 via deserialization of untrusted input via the order_id parameter. This makes it possible for authenticat…

    acowebs PDF Invoices and Packing Slips For WooCommerce Web / CMS