Addify vulnerabilities

Products

• Custom User Registration Fields For Woocommerce 2
• Role Based Pricing For Woocommerce 2

Newest

• addify request a quote for woocommerce Request a Quote for WooCommerce <= 2.9.2 - Unauthenticated Arbitrary File Upload via AJAX Popup Handler CVE-2026-18143 Public exploit 9.8 CriticalSeptember 26, 2026
• addify custom user registration fields for woocommerce Custom User Registration Fields for WooCommerce <= 2.2.3 - Unauthenticated Privilege Escalation via 'afreg_select_user_role' Parameter in Store API Checkout CVE-2026-15369 9.8 CriticalAugust 29, 2026
• addify tax exempt for woocommerce WordPress Tax Exempt for WooCommerce plugin < 1.9.5 - Path Traversal vulnerability CVE-2026-49779 6.5 MediumJuly 2, 2026
• addify custom user registration fields for woocommerce WordPress Custom User Registration Fields for WooCommerce plugin <= 2.1.2 - Arbitrary File Upload Vulnerability CVE-2025-60207 10.0 CriticalNovember 6, 2025
• addify free gifts SQL injection vulnerability in addify Addifyfreegifts v.1.0.2 and before allows a remote attacker... CVE-2023-44025 9.8 CriticalNovember 1, 2023
• addify abandoned cart recovery, advanced free gifts, checkout fields manager +10 more +12 more Multiple Plugins from Addify - Multiple CSRF CVE-2022-4888 6.5 MediumJuly 31, 2023
• addify role based pricing for woocommerce Role Based Pricing for WooCommerce < 1.6.2 - Subscriber+ Arbitrary File Upload CVE-2022-3537 8.8 HighNovember 7, 2022
• addify role based pricing for woocommerce Role Based Pricing for WooCommerce < 1.6.3 - Subscriber+ PHAR Deserialization CVE-2022-3536 8.8 HighNovember 7, 2022
• addify product stock manager Product Stock Manager < 1.0.5 - Subscriber+ Unauthorised AJAX Calls CVE-2022-3451 4.3 MediumNovember 7, 2022
• addify automatic user roles switcher Automatic User Roles Switcher < 1.1.2 - Subscriber+ Privilege Escalation CVE-2022-3419 6.5 MediumOctober 31, 2022