maartenbelmans CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

HIGH maartenbelmans CVE published 2026-08-22

CVE-2026-2996

The Advanced Product Fields (Product Addons) for WooCommerce plugin for WordPress is vulnerable to Improper Input Validation. This vulnerability allows unauthenticated attackers to bypass required paid addons and complete purchases at the base product price, effectively stealing products by paying a fraction of the intended total. The vulnerability was partially patched in version 1.6.19. Defenders should [truncated]