https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 12 Nov 2026 22:12:13 +0000 https://db.gcve.eu/vuln/fkie_cve-2026-119171 <p>The Advanced Product Fields (Product Addons) for WooCommerce WordPress plugin from 1.6.22 to 1.7.3 does not validate that a submitted value for a required paid product option matches one of the configured choices, only that it is not empty, allowing unauthenticated users to add a product to the cart and complete an order while skipping the required option&#39;s surcharge and paying only the base product price.</p> <p>The Advanced Product Fields (Product Addons) for WooCommerce WordPress plugin from 1.6.22 to 1.7.3 does not validate that a submitted value for a required paid product option matches one of the configured choices, only that it is not empty, allowing unauthenticated users to add a product to the cart and complete an order while skipping the required option&#39;s surcharge and paying only the base product price.</p> https://db.gcve.eu/vuln/fkie_cve-2026-119171 https://db.gcve.eu/vuln/ghsa-r9r2-c6x9-7wrp <p>The Advanced Product Fields (Product Addons) for WooCommerce WordPress plugin from 1.6.22 to 1.7.3 does not validate that a submitted value for a required paid product option matches one of the configured choices, only that it is not empty, allowing unauthenticated users to add a product to the cart and complete an order while skipping the required option&#39;s surcharge and paying only the base product price.</p> <p>The Advanced Product Fields (Product Addons) for WooCommerce WordPress plugin from 1.6.22 to 1.7.3 does not validate that a submitted value for a required paid product option matches one of the configured choices, only that it is not empty, allowing unauthenticated users to add a product to the cart and complete an order while skipping the required option&#39;s surcharge and paying only the base product price.</p> https://db.gcve.eu/vuln/ghsa-r9r2-c6x9-7wrp