woocommerce_extra_product_options_pro vulnerabilities

CVEs whose affected-version data names the woocommerce_extra_product_options_pro package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-104926Medium· 6.1

6d ago

WooCommerce Extra Product Options Pro <= 3.3.2 - Reflected Cross-Site Scripting via '<fieldname>_start' / '<fieldname>_end' Parameter

The WooCommerce Extra Product Options Pro plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the '<fieldname>_start / <fieldname>_end' parameter in all versions up to, and including, 3.3.2 due to insufficient input …

▾ SunlitThemeHigh · WooCommerce Extra Product Options ProEPSS 0.27%via CVEORG