CVE-2026-12968 | Product Addons and Product Options With Custom Fields Plugin Svg File Upload cross site scripting

July 22, 2026 Yanac

A vulnerability has been found in Product Addons and Product Options With Custom Fields Plugin up to 1.6.14 on WordPress and classified as problematic. This impacts an unknown function of the component Svg File Upload. The manipulation leads to cross site scripting.

This vulnerability is traded as CVE-2026-12968. It is possible to initiate the attack remotely. There is no exploit available.VulDB Recent EntriesRead More