Skip to content
OpenAdvisories

Product · Dotstore

Extra Fees Plugin for WooCommerce

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.8
    CVE-2026-116866

    WordPress Extra Fees Plugin for WooCommerce plugin <= 4.4.0 - PHP Object Injection vulnerability

    Contributor PHP Object Injection in Extra Fees Plugin for WooCommerce <= 4.4.0 versions.

    Dotstore Extra Fees Plugin for WooCommerce Web / CMS
  • High 7.1
    CVE-2026-39671

    WordPress Extra Fees Plugin for WooCommerce plugin <= 4.3.3 - Cross Site Request Forgery (CSRF) vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in Dotstore Extra Fees Plugin for WooCommerce woo-conditional-product-fees-for-checkout allows Cross Site Request Forgery.This issue affects Extra Fees Plugin for WooCommerce: from n/a through <= 4.3.3.

    Dotstore Extra Fees Plugin for WooCommerce Web / CMS