CVE-2026-109988 | acowebs Product Addons for Woocommerce Plugin up to 3.1.8 on WordPress fields[section][fields][row][col][type] cross site scripting

October 28, 2026 Yanac

A vulnerability classified as problematic was found in acowebs Product Addons for Woocommerce Plugin up to 3.1.8 on WordPress. Affected is an unknown function. Executing a manipulation of the argument fields[section][fields][row][col][type] can lead to cross site scripting.

This vulnerability is handled as CVE-2026-109988. The attack can be executed remotely. There is not any exploit available.VulDB Recent EntriesRead More