Advanced Product Fields (Product Addons) for WooCommerce — Vulnerabilities & Security Advisories 4

All 4 CVE vulnerabilities found in Advanced Product Fields (Product Addons) for WooCommerce, with AI-generated Chinese analysis, references, and POCs.

Vendor: maartenbelmans

CVE ID	Title	CVSS	Severity	Published
CVE-2026-2996	Advanced Product Fields (Product Addons) for WooCommerce <= 1.6.21 - Unauthenticated Improper Input Validation to Price Bypass via Add-to-Cart POST Request CWE-20	7.5	High	2026-08-22
CVE-2026-39499	WordPress Advanced Product Fields (Product Addons) for WooCommerce plugin <= 1.6.19 - PHP Object Injection vulnerability CWE-502	7.2	High	2026-06-15
CVE-2026-32457	WordPress Advanced Product Fields (Product Addons) for WooCommerce plugin <= 1.6.18 - Broken Access Control vulnerability CWE-862	5.3	Medium	2026-03-13
CVE-2025-13924	Advanced Product Fields (Product Addons) for WooCommerce <= 1.6.17 - Cross-Site Request Forgery to Product Field Group Duplication and Publication CWE-352	4.3	Medium	2025-12-09

All 4 known CVE vulnerabilities affecting Advanced Product Fields (Product Addons) for WooCommerce with full Chinese analysis, references, and POCs where available.