Skip to content
OpenAdvisories
High · 7.2 CVE-2026-102392 EUVD-2026-90225GHSA-rrxc-cq5w-3qfq

WordPress Extra Product Options For WooCommerce | Custom Product Addons and Fields plugin <= 3.3.8 - PHP Object Injection vulnerability

Published Sep 30, 2026 · Updated Sep 30, 2026 · Assigned by Patchstack

Vendor: ThemeHigh Product: Extra Product Options For WooCommerce | Custom Product Addons and Fields Category: Web / CMS

Description

Shop manager PHP Object Injection in Extra Product Options For WooCommerce | Custom Product Addons and Fields <= 3.3.8 versions.

Affected products

VendorProductAffectedFixed
ThemeHigh Extra Product Options For WooCommerce | Custom Product Addons and Fields ≤ 3.3.8 —

References