acowebs Schwachstellen (CVE)

7.5Hoch

CVE-2026-125780 vor 1 Stunde

WordPress Woocommerce Custom Product Addons Pro plugin <= 5.9.0 - Arbitrary File Deletion vulnerability

Acowebs Woocommerce Custom Product Addons Pro

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Acowebs Woocommerce Custom Product Addons Pro woo-custom-product-addons-pro allows Path Traversal.This issue affects Woocommerce Custom Product Addons Pro: from n/…

7.2Hoch

CVE-2026-103769 vor 2 Tagen

WordPress PDF Invoices and Packing Slips For WooCommerce plugin <= 1.4.10 - PHP Object Injection vulnerability

Acowebs PDF Invoices and Packing Slips For WooCommerce

Deserialization of Untrusted Data vulnerability in Acowebs PDF Invoices and Packing Slips For WooCommerce pdf-invoices-and-packing-slips-for-woocommerce allows Object Injection.This issue affects PDF Invoices and Packing Slips For WooCommerce: from n/a throug…

4.4Mittel

CVE-2026-109988 vor 18 Tagen

Product Addons for Woocommerce <= 3.1.8 - Authenticated (Shop Manager+) Stored Cross-Site Scripting via 'type' Field Parameter

acowebs Product Addons for Woocommerce – Product Options with Custom Fields

The Product Addons for Woocommerce – Product Options with Custom Fields plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'fields[section][fields][row][col][type]' parameter in all versions up to, and including, 3.1.8 due to insufficie…

5.9Mittel

CVE-2026-66475 vor 3 Monaten

WordPress Checkout Field Editor for WooCommerce – Checkout Manager plugin <= 3.0.5 - Cross Site Scripting (XSS) vulnerability

acowebs Checkout Field Editor for WooCommerce – Checkout Manager

Shop manager Cross Site Scripting (XSS) in Checkout Field Editor for WooCommerce – Checkout Manager <= 3.0.5 versions.

7.1Hoch

CVE-2026-59556 vor 3 Monaten

WordPress Dynamic Pricing With Discount Rules for WooCommerce plugin <= 4.5.11 - Cross Site Scripting (XSS) vulnerability

acowebs Dynamic Pricing With Discount Rules for WooCommerce

Unauthenticated Cross Site Scripting (XSS) in Dynamic Pricing With Discount Rules for WooCommerce <= 4.5.11 versions.

9.8Kritisch

CVE-2026-4001 vor 7 Monaten

Woocommerce Custom Product Addons Pro <= 5.4.1 - Unauthenticated Remote Code Execution via Custom Pricing Formula

acowebs Woocommerce Custom Product Addons Pro

The Woocommerce Custom Product Addons Pro plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 5.4.1 via the custom pricing formula eval() in the process_custom_formula() function within includes/process/price.php.…

7.2Hoch

CVE-2026-2296 vor 9 Monaten

Product Addons for Woocommerce – Product Options with Custom Fields <= 3.1.0 - Authenticated (Shop Manager+) Code Injection via Conditional Logic 'operator' Parameter

acowebs Product Addons for Woocommerce – Product Options with Custom Fields

The Product Addons for Woocommerce – Product Options with Custom Fields plugin for WordPress is vulnerable to Code Injection in all versions up to, and including, 3.1.0. This is due to insufficient input validation of the 'operator' field in conditional logic…

4.3Mittel

CVE-2025-12087 vor 1 Jahr

Wishlist and Save for later for Woocommerce <= 1.1.22 - Insecure Direct Object Reference to Authenticated (Subscriber+) Wishlist Item Deletion

acowebs Wishlist and Save for later for Woocommerce

The Wishlist and Save for later for Woocommerce plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.1.22 via the 'awwlm_remove_added_wishlist_page' AJAX action due to missing validation on a user cont…

9.1Kritisch

CVE-2025-47588 vor 1 Jahr

WordPress Dynamic Pricing With Discount Rules for WooCommerce plugin <= 4.5.9 - Arbitrary Code Execution vulnerability

acowebs Dynamic Pricing With Discount Rules for WooCommerce

Improper Control of Generation of Code ('Code Injection') vulnerability in acowebs Dynamic Pricing With Discount Rules for WooCommerce aco-woo-dynamic-pricing allows Code Injection.This issue affects Dynamic Pricing With Discount Rules for WooCommerce: from n…

8.8Hoch

CVE-2025-62008 vor 1 Jahr

WordPress Product Table For WooCommerce plugin <= 1.2.4 - PHP Object Injection vulnerability

acowebs Product Table For WooCommerce

Deserialization of Untrusted Data vulnerability in acowebs Product Table For WooCommerce product-table-for-woocommerce.This issue affects Product Table For WooCommerce: from n/a through <= 1.2.4.

7.6Hoch

CVE-2025-47544 vor 1 Jahr

WordPress Dynamic Pricing With Discount Rules for WooCommerce plugin <= 4.5.8 - SQL Injection Vulnerability

acowebs Dynamic Pricing With Discount Rules for WooCommerce

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in acowebs Dynamic Pricing With Discount Rules for WooCommerce aco-woo-dynamic-pricing allows Blind SQL Injection.This issue affects Dynamic Pricing With Discou…

6.5Mittel

CVE-2025-22638 vor 1 Jahr

WordPress Product Table For WooCommerce Plugin <= 1.2.3 - Cross Site Scripting (XSS) vulnerability

acowebs Product Table For WooCommerce

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in acowebs Product Table For WooCommerce product-table-for-woocommerce allows Stored XSS.This issue affects Product Table For WooCommerce: from n/a through <= 1.2.3.

4.1Mittel

CVE-2024-12109 vor 1 Jahr

Product Labels For Woocommerce < 1.5.9 - Admin+ SQLi

Product Labels For Woocommerce (Sale Badges)

The Product Labels For Woocommerce (Sale Badges) WordPress plugin before 1.5.9 does not sanitize and escape a parameter before using it in a SQL statement, allowing admins to perform SQL injection attacks

4.1Mittel

CVE-2024-10638 vor 1 Jahr

Product Labels For Woocommerce < 1.5.11 - Admin+ SQLi

Product Labels For Woocommerce (Sale Badges)

The Product Labels For Woocommerce (Sale Badges) WordPress plugin before 1.5.11 does not sanitize and escape a parameter before using it in a SQL statement, allowing admins to perform SQL injection attacks

7.6Hoch

CVE-2024-53817 vor 1 Jahr

WordPress Acowebs Product Labels For Woocommerce plugin <= 1.5.8 - SQL Injection vulnerability

acowebs Product Labels For Woocommerce

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in acowebs Product Labels For Woocommerce aco-product-labels-for-woocommerce allows Blind SQL Injection.This issue affects Product Labels For Woocommerce: from …

8.2Hoch

CVE-2024-30230 vor 2 Jahren

WordPress PDF Invoices and Packing Slips For WooCommerce plugin <= 1.3.7 - PHP Object Injection vulnerability

Acowebs PDF Invoices and Packing Slips For WooCommerce

Deserialization of Untrusted Data vulnerability in Acowebs PDF Invoices and Packing Slips For WooCommerce.This issue affects PDF Invoices and Packing Slips For WooCommerce: from n/a through 1.3.7.

8.8Hoch

CVE-2024-1773 vor 2 Jahren

PDF Invoices and Packing Slips For WooCommerce <= 1.3.7 - Authenticated (Subscriber+) PHP Object Injection

acowebs PDF Invoices and Packing Slips For WooCommerce; acowebs pdf_invoices_and_packing_slips

The PDF Invoices and Packing Slips For WooCommerce plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.3.7 via deserialization of untrusted input via the order_id parameter. This makes it possible for authenticat…

5.9Mittel

CVE-2024-24886 vor 2 Jahren

WordPress Product Labels For Woocommerce Plugin <= 1.5.3 is vulnerable to Cross Site Scripting (XSS)

Acowebs Product Labels For Woocommerce (Sale Badges)

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Acowebs Product Labels For Woocommerce (Sale Badges) allows Stored XSS.This issue affects Product Labels For Woocommerce (Sale Badges): from n/a through 1.5.3.