Skip to content
Acowebs vulnerabilities
Newest
-
acowebs product addons for woocommerce – product options with custom fields
Product Addons for Woocommerce <= 3.1.8 - Authenticated (Shop Manager+) Stored Cross-Site Scripting via 'type' Field Parameter
CVE-2026-109988
4.4 Medium
-
acowebs dynamic pricing with discount rules for woocommerce
Dynamic Pricing With Discount Rules for WooCommerce < 5.0.0 - Reflected XSS via wdpAjax
CVE-2026-13725
7.1 High
-
acowebs checkout field editor for woocommerce – checkout manager
WordPress Checkout Field Editor for WooCommerce – Checkout Manager plugin <= 3.0.5 - Cross Site Scripting (XSS) vulnerability
CVE-2026-66475
5.9 Medium
-
acowebs dynamic pricing with discount rules for woocommerce
WordPress Dynamic Pricing With Discount Rules for WooCommerce plugin <= 4.5.11 - Cross Site Scripting (XSS) vulnerability
CVE-2026-59556
7.1 High
-
acowebs woocommerce custom product addons pro
Woocommerce Custom Product Addons Pro <= 5.4.1 - Unauthenticated Remote Code Execution via Custom Pricing Formula
CVE-2026-4001
Public exploit
9.8 Critical
-
acowebs product addons for woocommerce – product options with custom fields
Product Addons for Woocommerce – Product Options with Custom Fields <= 3.1.0 - Authenticated (Shop Manager+) Code Injection via Conditional Logic 'operator' Parameter
CVE-2026-2296
7.2 High
-
acowebs product table for woocommerce
Product Table for WooCommerce <= 5.0.8 - Reflected Cross-Site Scripting
CVE-2025-12398
6.1 Medium
-
acowebs wishlist and save for later for woocommerce
Wishlist and Save for later for Woocommerce <= 1.1.22 - Insecure Direct Object Reference to Authenticated (Subscriber+) Wishlist Item Deletion
CVE-2025-12087
4.3 Medium
-
acowebs dynamic pricing with discount rules for woocommerce
WordPress Dynamic Pricing With Discount Rules for WooCommerce plugin <= 4.5.9 - Arbitrary Code Execution vulnerability
CVE-2025-47588
9.1 Critical
-
acowebs product table for woocommerce
WordPress Product Table For WooCommerce plugin <= 1.2.4 - PHP Object Injection vulnerability
CVE-2025-62008
8.8 High
-
acowebs dynamic pricing with discount rules for woocommerce
WordPress Dynamic Pricing With Discount Rules for WooCommerce plugin <= 4.5.8 - SQL Injection Vulnerability
CVE-2025-47544
7.6 High
-
acowebs product table for woocommerce
WordPress Product Table For WooCommerce Plugin <= 1.2.3 - Cross Site Scripting (XSS) vulnerability
CVE-2025-22638
6.5 Medium
-
unknown product labels for woocommerce (sale badges), acowebs product labels for woocommerce \(sale badges\) +1 more
Product Labels For Woocommerce < 1.5.9 - Admin+ SQLi
CVE-2024-12109
4.1 Medium
-
unknown product labels for woocommerce (sale badges), acowebs product labels for woocommerce \(sale badges\) +1 more
Product Labels For Woocommerce < 1.5.11 - Admin+ SQLi
CVE-2024-10638
4.1 Medium
-
acowebs product table for woocommerce
WordPress Product Table for WooCommerce plugin <= 4.0.3 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-22307
7.1 High
-
acowebs product labels for woocommerce
WordPress Acowebs Product Labels For Woocommerce plugin <= 1.5.8 - SQL Injection vulnerability
CVE-2024-53817
7.6 High
-
acowebs product table for woocommerce, codeastrology woo product table +1 more
Product Table for WooCommerce by CodeAstrology (wooproducttable.com) <= 3.5.1 - Information Exposure
CVE-2024-10813
5.3 Medium
-
acowebs pdf invoices and packing slips for woocommerce
WordPress PDF Invoices and Packing Slips For WooCommerce plugin <= 1.3.7 - PHP Object Injection vulnerability
CVE-2024-30230
8.2 High
-
acowebs pdf invoices and packing slips for woocommerce, pdf invoices and packing slips +1 more
PDF Invoices and Packing Slips For WooCommerce <= 1.3.7 - Authenticated (Subscriber+) PHP Object Injection
CVE-2024-1773
8.8 High
-
acowebs product labels for woocommerce (sale badges), product labels for woocommerce \(sale badges\) +1 more
WordPress Product Labels For Woocommerce Plugin <= 1.5.3 is vulnerable to Cross Site Scripting (XSS)
CVE-2024-24886
5.9 Medium