CVE-2026-102392

7.2 HIGH

Published 2026-09-30 · Updated 2026-09-30

AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.

NVD description

Shop manager PHP Object Injection in Extra Product Options For WooCommerce | Custom Product Addons and Fields <= 3.3.8 versions.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-502

All references

https://patchstack.com/database/wordpress/plugin/woo-extra-product-options/vulnerability/wordpress-extra-product-options-for-woocommerce-custom-product-addons-and-fields-plugin-3-3-8-php-object-injection-vulnerability?_s_id=cve

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

Related by shared AI tags and CWE weakness class. Browse the full archive.