Product Specifications for Woocommerce — Vulnerabilities & Security Advisories 2

All 2 CVE vulnerabilities found in Product Specifications for Woocommerce, with AI-generated Chinese analysis, references, and POCs.

Vendor: Amin A.Rezapour

CVE ID	Title	CVSS	Severity	Published
CVE-2026-11364	Product Specifications for Woocommerce <= 0.8.9 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Attribute/Group Creation, Modification, and Deletion via 'dwps_modify_groups' and 'dwps_modify_attributes' AJAX Actions CWE-862	4.3	Medium	2026-06-27
CVE-2022-46858	WordPress Product Specifications for Woocommerce Plugin <= 0.6.0 is vulnerable to Cross Site Scripting (XSS) CWE-79	7.1	High	2023-05-09

All 2 known CVE vulnerabilities affecting Product Specifications for Woocommerce with full Chinese analysis, references, and POCs where available.