https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 09:01:47 +0000 https://cve.radiocsirt.org/vuln/cve-2026-2996 <p><strong>Affected:</strong> maartenbelmans Advanced Product Fields (Product Addons) for WooCommerce</p> <p>The Advanced Product Fields (Product Addons) for WooCommerce plugin for WordPress is vulnerable to Improper Input Validation in all versions up to, and including, 1.6.21. This is due to a logic flaw in the &#39;validate_cart_data&#39; function. This makes it possible for unauthenticated attackers to bypass required paid addons and complete purchases at the base product price only, effectively stealing products by paying a fraction of the intended total. The vulnerability was partially patched in version 1.6.19.</p> <p><strong>Affected:</strong> maartenbelmans Advanced Product Fields (Product Addons) for WooCommerce</p> <p>The Advanced Product Fields (Product Addons) for WooCommerce plugin for WordPress is vulnerable to Improper Input Validation in all versions up to, and including, 1.6.21. This is due to a logic flaw in the &#39;validate_cart_data&#39; function. This makes it possible for unauthenticated attackers to bypass required paid addons and complete purchases at the base product price only, effectively stealing products by paying a fraction of the intended total. The vulnerability was partially patched in version 1.6.19.</p> https://cve.radiocsirt.org/vuln/cve-2026-2996