Log in Start free

Acowebs

Products

ProductCVEsExploitedLatest
Dynamic Pricing With Discount Rules for WooCommerce3–Jul 27, 2026
PDF Invoices and Packing Slips For WooCommerce2–Mar 28, 2024
Product Table For WooCommerce2–Oct 22, 2025
Product Addons for Woocommerce – Product Options with Custom Fields2–Oct 28, 2026
Checkout Field Editor for WooCommerce – Checkout Manager1–Jul 27, 2026
Woocommerce Custom Product Addons Pro1–Mar 23, 2026
Product Labels For Woocommerce1–Dec 6, 2024
Product Labels For Woocommerce (Sale Badges)1–Feb 8, 2024
Wishlist and Save for later for Woocommerce1–Nov 12, 2025

Exploited and recent CVEs

  • CVE-2026-109988 Medium 4.4 Product Addons for Woocommerce <= 3.1.8 - Authenticated (Shop Manager+) Stored Cross-Site Scripting via 'type' Field Parameter 0.2%
  • CVE-2026-66475 Medium 5.9 WordPress Checkout Field Editor for WooCommerce &#8211; Checkout Manager plugin <= 3.0.5 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-59556 High 7.1 WordPress Dynamic Pricing With Discount Rules for WooCommerce plugin <= 4.5.11 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2026-4001 Critical 9.8 Woocommerce Custom Product Addons Pro <= 5.4.1 - Unauthenticated Remote Code Execution via Custom Pricing Formula 0.9%
  • CVE-2026-2296 High 7.2 Product Addons for Woocommerce – Product Options with Custom Fields <= 3.1.0 - Authenticated (Shop Manager+) Code Injection via Conditional Logic 'operator' Parameter 0.7%
  • CVE-2025-12087 Medium 4.3 Wishlist and Save for later for Woocommerce <= 1.1.22 - Insecure Direct Object Reference to Authenticated (Subscriber+) Wishlist Item Deletion 0.2%
  • CVE-2025-47588 Critical 9.1 WordPress Dynamic Pricing With Discount Rules for WooCommerce plugin <= 4.5.9 - Arbitrary Code Execution vulnerability 0.5%
  • CVE-2025-62008 High 8.8 WordPress Product Table For WooCommerce plugin <= 1.2.4 - PHP Object Injection vulnerability 0.5%
  • CVE-2025-47544 High 7.6 WordPress Dynamic Pricing With Discount Rules for WooCommerce plugin <= 4.5.8 - SQL Injection Vulnerability 0.5%
  • CVE-2025-22638 Medium 6.5 WordPress Product Table For WooCommerce Plugin <= 1.2.3 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2024-53817 High 7.6 WordPress Acowebs Product Labels For Woocommerce plugin <= 1.5.8 - SQL Injection vulnerability 0.4%
  • CVE-2024-30230 High 8.2 WordPress PDF Invoices and Packing Slips For WooCommerce plugin <= 1.3.7 - PHP Object Injection vulnerability 0.6%
  • CVE-2024-1773 High 8.8 PDF Invoices and Packing Slips For WooCommerce <= 1.3.7 - Authenticated (Subscriber+) PHP Object Injection 1.0%
  • CVE-2024-24886 Medium 5.9 WordPress Product Labels For Woocommerce Plugin <= 1.5.3 is vulnerable to Cross Site Scripting (XSS) 0.3%