Wombat Plugins
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Advanced Product Fields (Product Addons) for WooCommerce | 2 | – | Jun 15, 2026 |
| WP Optin Wheel | 1 | – | Apr 1, 2025 |
Exploited and recent CVEs
- CVE-2026-39499 WordPress Advanced Product Fields (Product Addons) for WooCommerce plugin <= 1.6.19 - PHP Object Injection vulnerability 0.4%
- CVE-2026-32457 WordPress Advanced Product Fields (Product Addons) for WooCommerce plugin <= 1.6.18 - Broken Access Control vulnerability 0.2%
- CVE-2025-31824 WordPress WP Optin Wheel Plugin <= 1.4.7 - Server Side Request Forgery (SSRF) vulnerability 0.3%