Addify Custom Fields For Woocommerce Vulnerabilities

The Custom Fields for WooCommerce plugin for WordPress is vulnerable to Arbitrary File Deletion in versions up to, and including, 1.5.0. This is due to insufficient validation of a user supplied path. This makes it possible for unauthenticated attackers to delete arbitrary files on the server, which can lead to a site...

CVSS:

9.1

(Wordfence)

Affected:

up to 1.5.0

Fixed in:

1.5.1

Disclosed:

Jul 27, 2026

CVE-2026-16940 on NVD →

Several Addify plugins for WordPress are vulnerable to Cross-Site Request Forgery in various versions. This is due to missing or incorrect nonce validation on several functions. This makes it possible for unauthenticated attackers to perform unauthorized actions via a forged request granted they can trick a site admini...

CVSS:

4.3

(Wordfence)

Affected:

up to 1.0.4

Fixed in:

1.0.4

Disclosed:

Jul 10, 2023

CVE-2022-4888 on NVD →