Vulnerability in Product Input Fields For Woocommerce
CVE-2026-19089
The Product Input Fields for WooCommerce WordPress plugin before 2.0.2 does not validate uploaded file types when its accepted-types setting is left empty, which its own documentation advertises as accepting all files, allowing unauthentic…
Affected products
- Unknown Product Input Fields For Woocommerce — versions 2.0.0
References
- contact@wpscan.com (technical-description, exploit, vdb-entry)