Product Input Fields for WooCommerce vulnerabilities
We track 1 vulnerability in Product Input Fields for WooCommerce products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on August 10, 2026.
1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score
Latest Product Input Fields for WooCommerce vulnerabilities
- 9.8 Critical severity
Product Input Fields for WooCommerce: Unrestricted Upload of File with Dangerous Type
The Product Input Fields for WooCommerce WordPress plugin before 2.0.2 does not validate uploaded file types when its accepted-types setting is left empty, which its own documentation advertises as accepting all files, allowing unauthenticated attackers to upl