Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage

acowebs vulnerabilities

14 published CVEs name acowebs among the affected products.

Published CVEs
14
Last 12 months
7
Critical
2
Known exploited
0

Critical 2High 7Medium 5Low 0Not scored 0

CVEs per yearBy the year they were published

  1. 20244
  2. 20255
  3. 20265

Newest CVEs

  • CVE-2026-109988

    Product Addons for Woocommerce <= 3.1.8 - Authenticated (Shop Manager+) Stored Cross-Site Scripting via 'type' Field Parameter

    acowebs · Product Addons for Woocommerce – Product Options with Custom Fields

    Medium4.4
  • CVE-2026-66475

    WordPress Checkout Field Editor for WooCommerce &#8211; Checkout Manager plugin <= 3.0.5 - Cross Site Scripting (XSS) vulnerability

    acowebs · Checkout Field Editor for WooCommerce &#8211; Checkout Manager

    Medium5.9
  • CVE-2026-59556

    WordPress Dynamic Pricing With Discount Rules for WooCommerce plugin <= 4.5.11 - Cross Site Scripting (XSS) vulnerability

    acowebs · Dynamic Pricing With Discount Rules for WooCommerce

    High7.1
  • CVE-2026-4001

    Woocommerce Custom Product Addons Pro <= 5.4.1 - Unauthenticated Remote Code Execution via Custom Pricing Formula

    acowebs · Woocommerce Custom Product Addons Pro

    Critical9.8
  • CVE-2026-2296

    Product Addons for Woocommerce – Product Options with Custom Fields <= 3.1.0 - Authenticated (Shop Manager+) Code Injection via Conditional Logic 'operator' Parameter

    acowebs · Product Addons for Woocommerce – Product Options with Custom Fields

    High7.2
  • CVE-2025-12087

    Wishlist and Save for later for Woocommerce <= 1.1.22 - Insecure Direct Object Reference to Authenticated (Subscriber+) Wishlist Item Deletion

    acowebs · Wishlist and Save for later for Woocommerce

    Medium4.3
  • CVE-2025-47588

    WordPress Dynamic Pricing With Discount Rules for WooCommerce plugin <= 4.5.9 - Arbitrary Code Execution vulnerability

    acowebs · Dynamic Pricing With Discount Rules for WooCommerce

    Critical9.1
  • CVE-2025-62008

    WordPress Product Table For WooCommerce plugin <= 1.2.4 - PHP Object Injection vulnerability

    acowebs · Product Table For WooCommerce

    High8.8
  • CVE-2025-47544

    WordPress Dynamic Pricing With Discount Rules for WooCommerce plugin <= 4.5.8 - SQL Injection Vulnerability

    acowebs · Dynamic Pricing With Discount Rules for WooCommerce

    High7.6
  • CVE-2025-22638

    WordPress Product Table For WooCommerce Plugin <= 1.2.3 - Cross Site Scripting (XSS) vulnerability

    acowebs · Product Table For WooCommerce

    Medium6.5