Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2026-32457

WordPress Advanced Product Fields (Product Addons) for WooCommerce plugin <= 1.6.18 - Broken Access Control vulnerability

Description

Missing Authorization vulnerability in Wombat Plugins Advanced Product Fields (Product Addons) for WooCommerce advanced-product-fields-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Advanced Product Fields (Product Addons) for WooCommerce: from n/a through <= 1.6.18.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Wombat Plugins Advanced Product Fields (Product Addons) for WooCommerce

Default version status: unaffected

  • 0 to ≤ 1.6.18affected

References