WordPress security by component

Woocommerce Custom Product Addons Pro

Plugin description

Woocommerce Custom Product Addons Pro is a WordPress component with 1 published CVE record in this archive. The latest tracked vulnerability was published Mar 24, 2026; the highest CVE/CNA score is 9.8.

Plugin slug: woocommerce-custom-product-addons-pro

Latest vulnerability

CVE-2026-4001: Woocommerce Custom Product Addons Pro: Code execution

Woocommerce Custom Product Addons Pro is affected by code execution. The vulnerable path is reachable without authentication. Successful exploitation can run attacker-controlled code in the WordPress hosting account. The published affected range is <= 5.4.1.

PublishedMar 24, 2026

Known safe version> 5.4.1

		Safe version
Mar 24, 2026	CVE-2026-4001 Woocommerce Custom Product Addons Pro: Code execution Woocommerce Custom Product Addons Pro is affected by code execution. The vulnerable path is reachable without authentication. Successful exploitation can run attacker-controlled code in the WordPress hosting account. The published affected range is <= 5.4.1.	> 5.4.1	CVE9.8 NVDPending