WordPress security by component

Product Addons for Woocommerce – Product Options with Custom Fields

Plugin description

Product Addons for Woocommerce – Product Options with Custom Fields is a WordPress component with 1 published CVE record in this archive. The latest tracked vulnerability was published Feb 18, 2026; the highest CVE/CNA score is 7.2.

Plugin slug: woo-custom-product-addons

Latest vulnerability

CVE-2026-2296: Product Addons for Woocommerce – Product Options with Custom Fields: Code execution

Product Addons for Woocommerce – Product Options with Custom Fields is affected by code execution. Exploitation requires an authenticated WordPress account. Successful exploitation can run attacker-controlled code in the WordPress hosting account.

PublishedFeb 18, 2026

Safe version guidanceSee mitigation notes

		Safe version
Feb 18, 2026	CVE-2026-2296 Product Addons for Woocommerce – Product Options with Custom Fields: Code execution Product Addons for Woocommerce – Product Options with Custom Fields is affected by code execution. Exploitation requires an authenticated WordPress account. Successful exploitation can run attacker-controlled code in the WordPress hosting account.	See mitigation notes	CVE7.2 NVDPending