Advanced Product Fields (Product Addons) for WooCommerce
Advanced Product Fields (Product Addons) for WooCommerce has 4 disclosed vulnerabilities in the WordSec catalog, reported between 2025 and 2026; all 4 are fixed as of October 2026. Their average CVSS score is 5.9, and the most serious one scores 7.5 out of 10. Severity breakdown: 0 critical and 1 high. 2026 was the busiest year with 3 disclosures.
The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (25%). Other recurring categories include Deserialization Of Untrusted Data, Improper Input Validation.
Every one of the 4 issues recorded for Advanced Product Fields (Product Addons) for WooCommerce has a vendor fix available, so running the current release closes all known holes.
4 independent researchers contributed these findings, one record each. Advanced Product Fields (Product Addons) for WooCommerce is installed on roughly 50,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.3.
CVE-2026-2996Advanced Product Fields (Product Addons) for WooCommerce <= 1.6.21 - Unauthenticated Improper Input Validation to Price Bypass via Add-to-Cart POST Request
Read the full analysisVulnerability Records

Advanced Product Fields (Product Addons) for WooCommerce
Author
Maarten B
Create customizable WooCommerce products without coding. Add text fields, dropdowns, checkboxes, radio buttons, and other options to your products. Let customers personalize their purchases, charge extra for selected options, and show or hide fields based on their choices. ✅ Solves many use-cases while remaining lightweight & fast (it’s our priority)! ❤️ Trusted by 50,000+ store owners and rated 4.8/5 💻 View Demos | 🔥 Pro Version | 📃 Documentation Whether you’re selling personalized gifts, custom T-shirts, or build-your-own pizzas, Advanced Product Fields helps you offer more choices to your customers. Selected options and any additional costs are automatically reflected in the cart and checkout, with the customer’s choices saved to the order. Setting everything up is easy thanks to our intuitive field builder, inspired by Advanced Custom Fields (ACF). 👉️ Introduction to Advanced Product Fields for WooCommerce! 👉️ Features Intuitive and beautiful backend builder which looks like Advanced Custom Fields 10 different form elements to choose from: Text field – A normal text input field to collect single-line text Text area – To collect multi-line text Email – An input field to accept only email addresses URL – A text field to accept only links (URLs) Number – A number field to accept both decimal or whole numbers Select (drop-down) – A dropdown field to select one option from a list of options Checkboxes – To choose one or more options Radio buttons – To select one option from multiple options True/false – A single “yes or no” checkbox, which you usually know from “accept the terms and conditions” fields Paragraph – If you want to add static blocks of text in between input fields, this does the trick! Conditional logic (show/hide fields based on other input fields) Increase final product price: add a flat fee to your products depending on the field value(s) Works with your WooCommerce tax settings Optimized for speed and faster than other plugins in this genre Visibility options: decide on which product(s) to show your fields Works with both simple & variable products and also supports variable products over ajax Frontend already translated in English, French, German, Spanish, and Dutch Translation-ready for other languages 👉 How can our plugin be useful and what should you use it for? WooCommerce only has limited features to display extra product options (often also called product addons) on your product pages. You can use their “variable products” which can add a few select (dropdown) lists to a product. But what if you’re selling customizable t-shirts where customers can print their name on a t-shirt? Or what if you’d like your customers to build their own pizza where they can freely choose extra toppings? These product types can’t be built with WooCommerce out-of-the-box. That’s where our plugin comes in. It allows you to build more complex WooCommerce products that can easily be personalized by your customer. When should you use WooCommerce built-in variations versus our plugin? We wrote a handy blog post to answer that question. 👉️ What makes our plugin different from the competition? During your research, you may have seen other plugins that do (more or less) the same. Here is how we are different: ✅️ We build with modern WordPress and WooCommerce standards in mind, keeping our code clean and efficient. ✅️ Quality above quantity. We carefully choose what & how we implement features so the plugin remains lightweight and fast. ✅️ The plugin’s frontend scripts are tiny (~7kb) and don’t impact your SEO score. ✅️ Easy-to-use modern backend (based on ACF) which follows WordPress & WooCommerce standards. ✅️ Regular updates to stay on top of new WordPress & WooCommerce versions. ✅️ Our plugin runs fewer database queries because we’ve spent time optimizing how data is stored. ✅️ No nags! We do not like to plaster your WP admin with unnecessary ads or asking for a review. We do hope you leave a review to help us grow. We understand these statements are meaningless without additional proof to back them up, so here are a few links to help make up your mind: Check out the WordPress reviews here. Plugin comparison with screenshots and proof. Unofficial plugin test & rating. Having doubts? Just contact us with your questions! 👉️ Why Studio Wombat? ✅ A small but friendly team of WooCommerce professionals. ✅ We develop and support WooCommerce plugins full-time. ✅ Over 50,000 happy customers. ✅ We understand your success is our success, so we do our absolute best to help you out. ✅ Dedicated support team. ✅ Ahead of time, we test our plugins with the latest WordPress and WooCommerce versions. ✅ We choose quality over quantity: not every feature makes it in the plugins, but those that do are quality coded. ✅ We care about your site speed. 👉️ Requirements WooCommerce 3.6.0 or higher WordPress 4.7 or higher PHP 7.0 or higher 👉️ Free vs. Pro: Which version do I need? The free version includes everything you need to create customizable WooCommerce products with essential field types, conditional logic, and simple pricing. For more advanced product configurations, Pro adds additional field types, flexible pricing options, and integrations. Here are some differences to keep in mind: The free version doesn’t integrate with 3rd party plugins such as WooCommerce Subscriptions or a multi-currency plugin (unless they write an integration). It doesn’t work with themes using Ajax technology for their product “add to cart” button. The free version only allows you to add an extra flat fee ( = not quantity based) to your product price. You can’t add fields to separate variations. If you need those features, you may consider our premium version. You can read ahead what’s included with premium. 👉️ Need more advanced product options? Advanced Product Fields Pro takes your customizable products even further. Add image swatches, file uploads, complex pricing formulas, repeatable fields, and much more. It’s ideal for stores selling personalized products, configurable items, or products requiring advanced pricing. Everything from the free version, plus: Works on these product types: Simple, Variable (including separate variations), and Subscriptions. More field types: File upload – allowing your customers to upload one or multiple files Image swatches – multi and single choice options with images (and image zoom) Color swatches – multi and single color options Text swatches – text options Date – adds a calendar picker Calculation – adds an informative calculation (like “square meters”) or a separate extra cost calculation. Image with quantities – image swatches with quantity inputs underneath. Child products – select other products from your store as options (and enjoy stock control). Cards – clickable cards with nicely laid-out information. Content fields to add content to your product pages (no form inputs): Image – to add extra images Text/HTML – to add extra text, HTML, or even shortcodes Section – to group fields in a section Support for modern themes using “ajax add to cart” technology The product image on the frontend can be changed when different options are selected Set a minimum/maximum allowed number of selections on multi-select fields More pricing options: formula-based pricing, quantity-based pricing, percentage-based pricing, value-based pricing, and character length pricing You can also give discounts (negative pricing) on options Repeatable fields: repeat fields if your visitors press an ‘add new’ button Quantity-based fields: fields can repeat based on the quantity the customer selects Works with page/product builders like Elementor, Oxygen, Beaver Builder, and Divi Variable builder for more complex pricing possibilities More options to attach one field group to multiple products at once (via product name, variation, category, tag, …) Support for multilingual stores through WPML or Polylang Works with your WooCommerce tax settings Support for multi-currency stores via the WOOCS plugin More integrations with other plugins (such as WooCommerce Subscriptions) & popular themes. See here More options for text fields: min. and max. length, or HTML validation (regex pattern) Actions & filters so you can extend the plugin with additional features HTML output allowing you to more easily style certain aspects with CSS Great tutorials to display a multi-step form, make a donation product, build a pizza configurator, etc … Add-on plugins to make it even more powerful. You can create product configurators with live preview, powerup file uploads, add an image editor, integrate with ACF, … And more..! Premium Demos | Premium WP admin demo | More info
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C