Tychesoftwares Product Input Fields For Woocommerce
3 CVEs affecting Tychesoftwares Product Input Fields For Woocommerce. Latest disclosed: 2025-03-08. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-13359 | High | 8.1 | 2025-03-08 | The Product Input Fields for WooCommerce plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in the add_produ… |
CVE-2020-36696 | High | 7.5 | 2023-06-07 | The Product Input Fields for WooCommerce plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the handle_downloads()… |
CVE-2024-10857 | Medium | 6.5 | 2024-11-26 | The Product Input Fields for WooCommerce plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.9 via the handle_dow… |