Skip to content
OpenAdvisories

Vendor

acowebs

14 known vulnerabilities.

Products

Dynamic Pricing With Discount Rules for WooCommerce 3 Product Addons for Woocommerce – Product Options with Custom Fields 2 PDF Invoices and Packing Slips For WooCommerce 2 Product Table For WooCommerce 2 Wishlist and Save for later for Woocommerce 1 Product Labels For Woocommerce (Sale Badges) 1 Woocommerce Custom Product Addons Pro 1 Product Labels For Woocommerce 1 Checkout Field Editor for WooCommerce – Checkout Manager 1
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Medium 4.4
    CVE-2026-109988

    Product Addons for Woocommerce <= 3.1.8 - Authenticated (Shop Manager+) Stored Cross-Site Scripting via 'type' Field Parameter

    The Product Addons for Woocommerce – Product Options with Custom Fields plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'fields[section][fields][row][col][type]' parameter in all versions up to, and including, 3.1.8 due to insufficie…

    acowebs Product Addons for Woocommerce – Product Options with Custom Fields Web / CMS
  • Medium 5.9
    CVE-2026-66475

    WordPress Checkout Field Editor for WooCommerce &#8211; Checkout Manager plugin <= 3.0.5 - Cross Site Scripting (XSS) vulnerability

    Shop manager Cross Site Scripting (XSS) in Checkout Field Editor for WooCommerce &#8211; Checkout Manager <= 3.0.5 versions.

    acowebs Checkout Field Editor for WooCommerce &#8211; Checkout Manager Web / CMS
  • Medium 4.3
    CVE-2025-12087

    Wishlist and Save for later for Woocommerce <= 1.1.22 - Insecure Direct Object Reference to Authenticated (Subscriber+) Wishlist Item Deletion

    The Wishlist and Save for later for Woocommerce plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.1.22 via the 'awwlm_remove_added_wishlist_page' AJAX action due to missing validation on a user cont…

    acowebs Wishlist and Save for later for Woocommerce Web / CMS
  • Medium 6.5
    CVE-2025-22638

    WordPress Product Table For WooCommerce Plugin <= 1.2.3 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in acowebs Product Table For WooCommerce product-table-for-woocommerce allows Stored XSS.This issue affects Product Table For WooCommerce: from n/a through <= 1…

    acowebs Product Table For WooCommerce Web / CMS
  • Medium 5.9
    CVE-2024-24886

    WordPress Product Labels For Woocommerce Plugin <= 1.5.3 is vulnerable to Cross Site Scripting (XSS)

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Acowebs Product Labels For Woocommerce (Sale Badges) allows Stored XSS.This issue affects Product Labels For Woocommerce (Sale Badges): from n/a through 1.5.…

    acowebs Product Labels For Woocommerce (Sale Badges) Web / CMS