Woocommerce Custom Product Addons Pro vulnerabilities
1 known vulnerability in Woocommerce Custom Product Addons Pro from Acowebs. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score
Latest first
- 9.8 Critical severity
Woocommerce Custom Product Addons Pro: Improper Neutralization of Directives in Dynamically Evaluated Code
The Woocommerce Custom Product Addons Pro plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 5.4.1 via the custom pricing formula eval() in the process_custom_formula() function within includes/process/price.php.