Plugin icon

Product Specifications for Woocommerce

product-specifications

Vulnerabilities:

2

Last Updated:

June 20, 2026

Active Installs:

1000

Published
Title
Fixed in
CVSS
Published
2026-06-26
Title
Product Specifications for Woocommerce < 0.8.10 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Attribute/Group Creation, Modification, and Deletion via 'dwps_modify_groups' and 'dwps_modify_attributes' AJAX Actions
Fixed in
Fixed in 0.8.10
CVSS
4.3 (medium)
Published
2023-03-28
Title
Product Specifications for Woocommerce < 0.7.0 - Reflected Cross-Site Scripting
Fixed in
Fixed in 0.7.0
CVSS
7.1 (high)