Plugin icon

WowAddons – Product Addons and Product Options With Custom Fields

product-addons
Plugin closed

Vulnerabilities:

3

Last Updated:

October 6, 2026

Active Installs:

4000

Published
Title
Fixed in
CVSS
Published
2026-07-07
Title
Product Addons and Product Options With Custom Fields – WowAddons < 1.6.9 - Missing Authorization
Fixed in
Fixed in 1.6.9
CVSS
5.3 (medium)
Published
2026-07-01
Title
Product Addons – WowAddons < 1.6.15 - Unauthenticated Stored XSS via Arbitrary SVG Upload
Fixed in
Fixed in 1.6.15
CVSS
8.8 (high)
Published
2026-06-30
Title
Product Addons and Product Options With Custom Fields – WowAddons < 1.6.15 - Unauthenticated Stored Cross-Site Scripting
Fixed in
Fixed in 1.6.15
CVSS
7.2 (high)