https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T11:51:59.857131+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-358028 EUVD-2026-358028 2026-10-05T11:51:59.901184+00:00 EUVD-2026-358028 https://cve.radiocsirt.org/vuln/fkie_cve-2026-2996 fkie_cve-2026-2996 2026-10-05T11:51:59.901220+00:00

The Advanced Product Fields (Product Addons) for WooCommerce plugin for WordPress is vulnerable to Improper Input Validation in all versions up to, and including, 1.6.21. This is due to a logic flaw in the 'validate_cart_data' function. This makes it possible for unauthenticated attackers to bypass required paid addons and complete purchases at the base product price only, effectively stealing products by paying a fraction of the intended total. The vulnerability was partially patched in version 1.6.19.

 https://cve.radiocsirt.org/vuln/ghsa-9gvr-wm3r-qgg4 GHSA-9gvr-wm3r-qgg4 2026-10-05T11:51:59.901254+00:00

The Advanced Product Fields (Product Addons) for WooCommerce plugin for WordPress is vulnerable to Improper Input Validation in all versions up to, and including, 1.6.21. This is due to a logic flaw in the 'validate_cart_data' function. This makes it possible for unauthenticated attackers to bypass required paid addons and complete purchases at the base product price only, effectively stealing products by paying a fraction of the intended total. The vulnerability was partially patched in version 1.6.19.