CVE-2026-39499
WordPress Advanced Product Fields (Product Addons) for WooCommerce plugin <= 1.6.19 - PHP Object Injection vulnerability
Shop manager PHP Object Injection in Advanced Product Fields (Product Addons) for WooCommerce <= 1.6.19 versions.
CVSS 3.1 · 7.2 High
EPSS < 1%
KEV · Not listed
Vendors
Products