Addify
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Custom User Registration Fields for WooCommerce | 2 | – | Aug 29, 2026 |
| Request a Quote for WooCommerce | 1 | – | Sep 26, 2026 |
| Tax Exempt for WooCommerce | 1 | – | Jul 2, 2026 |
Exploited and recent CVEs
- CVE-2026-18143 Request a Quote for WooCommerce <= 2.9.2 - Unauthenticated Arbitrary File Upload via AJAX Popup Handler 2.1%
- CVE-2026-15369 Custom User Registration Fields for WooCommerce <= 2.2.3 - Unauthenticated Privilege Escalation via 'afreg_select_user_role' Parameter in Store API Checkout 0.5%
- CVE-2026-49779 WordPress Tax Exempt for WooCommerce plugin < 1.9.5 - Path Traversal vulnerability 0.4%
- CVE-2025-60207 WordPress Custom User Registration Fields for WooCommerce plugin <= 2.1.2 - Arbitrary File Upload Vulnerability 0.5%