Acowebs vulnerabilities
We track 9 vulnerabilities in Acowebs products across 7 products. 9 are rated high or critical, and none are known to be exploited. The most recent was published on November 13, 2026.
Latest Acowebs vulnerabilities
- 7.2 High severity
PDF Invoices and Packing Slips For WooCommerce: Deserialization of Untrusted Data
Deserialization of Untrusted Data vulnerability in Acowebs PDF Invoices and Packing Slips For WooCommerce pdf-invoices-and-packing-slips-for-woocommerce allows Object Injection.This issue affects PDF Invoices and Packing Slips For WooCommerce: from n/a through
- 9.8 Critical severity
Woocommerce Custom Product Addons Pro: Improper Neutralization of Directives in Dynamically Evaluated Code
The Woocommerce Custom Product Addons Pro plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 5.4.1 via the custom pricing formula eval() in the process_custom_formula() function within includes/process/price.php.
- 7.2 High severity
Product Addons for Woocommerce – Product…: Improper Control of Generation of Code
The Product Addons for Woocommerce – Product Options with Custom Fields plugin for WordPress is vulnerable to Code Injection in all versions up to, and including, 3.1.0. This is due to insufficient input validation of the 'operator' field in conditional logic
- 9.1 Critical severity
Dynamic Pricing With Discount Rules for…: Improper Control of Generation of Code
Improper Control of Generation of Code ('Code Injection') vulnerability in acowebs Dynamic Pricing With Discount Rules for WooCommerce aco-woo-dynamic-pricing allows Code Injection.This issue affects Dynamic Pricing With Discount Rules for WooCommerce: from n/
- 8.8 High severity
Product Table For WooCommerce: Deserialization of Untrusted Data
Deserialization of Untrusted Data vulnerability in acowebs Product Table For WooCommerce product-table-for-woocommerce.This issue affects Product Table For WooCommerce: from n/a through <= 1.2.4.
- 7.2 High severity
Dynamic Pricing With Discount Rules for…: Improper Neutralization of Special Elements used in an SQL Command
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in acowebs Dynamic Pricing With Discount Rules for WooCommerce aco-woo-dynamic-pricing allows Blind SQL Injection.This issue affects Dynamic Pricing With Discoun
- 7.6 High severity
Product Labels For Woocommerce: Improper Neutralization of Special Elements used in an SQL Command
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in acowebs Product Labels For Woocommerce aco-product-labels-for-woocommerce allows Blind SQL Injection.This issue affects Product Labels For Woocommerce: from n
- 8.8 High severity
PDF Invoices and Packing Slips For WooCommerce: Deserialization of Untrusted Data
Deserialization of Untrusted Data vulnerability in Acowebs PDF Invoices and Packing Slips For WooCommerce.This issue affects PDF Invoices and Packing Slips For WooCommerce: from n/a through 1.3.7.
- 8.8 High severity
PDF Invoices and Packing Slips For WooCommerce: Improper Neutralization of Special Elements in Output Used by a Downstream Component
The PDF Invoices and Packing Slips For WooCommerce plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.3.7 via deserialization of untrusted input via the order_id parameter. This makes it possible for authenticate