Skip to content
OpenAdvisories
High · 7.2 CVE-2026-32414 EUVD-2026-11933GHSA-6mw4-4wcp-xqg4

WordPress Advanced Woo Labels plugin <= 2.36 - Remote Code Execution (RCE) vulnerability

Published Mar 13, 2026 · Updated Apr 29, 2026 · Assigned by Patchstack

Description

Improper Control of Generation of Code ('Code Injection') vulnerability in ILLID Advanced Woo Labels advanced-woo-labels allows Remote Code Inclusion.This issue affects Advanced Woo Labels: from n/a through <= 2.36.

Affected products

VendorProductAffectedFixed
ILLID Advanced Woo Labels ≤ 2.36 —

References