Skip to content
OpenAdvisories
High · 7.2 CVE-2026-39499 EUVD-2026-36946GHSA-gr67-hjv8-58w8

WordPress Advanced Product Fields (Product Addons) for WooCommerce plugin <= 1.6.19 - PHP Object Injection vulnerability

Published Jun 15, 2026 · Updated Jun 16, 2026 · Assigned by Patchstack

Vendor: Wombat Plugins Product: Advanced Product Fields (Product Addons) for WooCommerce Category: Web / CMS

Description

Shop manager PHP Object Injection in Advanced Product Fields (Product Addons) for WooCommerce <= 1.6.19 versions.

Affected products

VendorProductAffectedFixed
Wombat Plugins Advanced Product Fields (Product Addons) for WooCommerce ≤ 1.6.19 —

References