dornaweb
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Product Specifications for Woocommerce | 1 | – | Jun 27, 2026 |
Exploited and recent CVEs
- CVE-2026-11364 Product Specifications for Woocommerce <= 0.8.9 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Attribute/Group Creation, Modification, and Deletion via 'dwps_modify_groups' and 'dwps_modify_attributes' AJAX Actions 0.4%