Most recent entries from all https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 12 Nov 2026 21:13:11 +0000 CVE-2026-119171 — Advanced Product Fields (Product Addons) for WooCommerce 1.6.22 - 1.7.3 - Unauthenticated Paid Option Surcharge Bypass… https://db.gcve.eu/vuln/cve-2026-119171 <p><strong>Affected:</strong> Unknown Advanced Product Fields (Product Addons) for WooCommerce</p> <p>The Advanced Product Fields (Product Addons) for WooCommerce WordPress plugin from 1.6.22 to 1.7.3 does not validate that a submitted value for a required paid product option matches one of the configured choices, only that it is not empty, allowing unauthenticated users to add a product to the cart and complete an order while skipping the required option&#39;s surcharge and paying only the base product price.</p> <p><strong>Affected:</strong> Unknown Advanced Product Fields (Product Addons) for WooCommerce</p> <p>The Advanced Product Fields (Product Addons) for WooCommerce WordPress plugin from 1.6.22 to 1.7.3 does not validate that a submitted value for a required paid product option matches one of the configured choices, only that it is not empty, allowing unauthenticated users to add a product to the cart and complete an order while skipping the required option&#39;s surcharge and paying only the base product price.</p> https://db.gcve.eu/vuln/cve-2026-119171