Product Input Fields for WooCommerce
Product Input Fields for WooCommerce has 5 disclosed vulnerabilities in the WordSec catalog, reported between 2020 and 2026; all 5 are fixed as of September 2026. Their average CVSS score is 7.2, and the most serious one scores 9.8 out of 10. Severity breakdown: 1 critical and 2 high. 2024 was the busiest year with 2 disclosures.
The most common weakness is Unrestricted Upload Of File With Dangerous Type, behind 2 of the records (40%). Other recurring categories include Cross-Site Request Forgery (CSRF), Improper Authorization.
Every one of the 5 issues recorded for Product Input Fields for WooCommerce has a vendor fix available, so running the current release closes all known holes.
5 independent researchers contributed these findings, one record each. Product Input Fields for WooCommerce is installed on roughly 4,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.4.
CVE-2026-19089Product Input Fields for WooCommerce <= 2.0.1 - Unauthenticated Arbitrary File Upload
Read the full analysisVulnerability Records

Product Input Fields for WooCommerce
Author
tychesoftwares
woocommerceProduct Input Fields for WooCommerce lets you add custom input fields to your WooCommerce product pages, making it easy to collect these details before customers add products to their cart. Whether you need a text field for engraving instructions, a file upload for artwork, a date picker for scheduling, or a dropdown with predefined options, the plugin helps you gather the right information during checkout. You can add one input field that applies across your entire store and one product-specific input field for individual products. Customize field labels, placeholders, default values, display position, and validation settings to match your store’s requirements. Key Features Choose from 19 Different Field Types Add custom fields to gather additional information from customers before they purchase. The plugin includes 19 field types, including Text, Textarea, Number, Checkbox, Radio Buttons, Select, File Upload, Date Picker, Time Picker, Week Picker, Color Picker, Email, Phone, URL, Password, Country, Search, and Range. Add Custom Fields to WooCommerce Products Collect additional information from customers before they purchase. Add custom input fields globally across your store or assign them to individual products, depending on your requirements. Customize Product Fields to Match Your Store Configure field titles, placeholders, default values, display position, priority, and custom CSS classes so your input fields match the design of your WooCommerce store. Make Customer Input Mandatory Mark fields as required to ensure customers provide essential details before adding products to their cart. You can also customize the validation message shown when a required field is left empty. Keep Customer Customization Details with Every Order Customer information collected through product input fields is saved with the WooCommerce order, making it easy to review customization requests during order processing. Uploaded files can also be attached to order emails for quick access. Common Use Cases Product Input Fields for WooCommerce is ideal for stores selling: * Personalized gifts * Engraved jewellery and accessories * Printed T-shirts and promotional products * Custom cakes and bakery items * Business cards and printed stationery * Photo printing services * Made-to-order furniture * Signage and printing products * Products that require customer notes or special instructions Documentation & Support Visit the WordPress support forums Check the documentation for common answers Try the live demo to see how the plugin works on the storefront. If you find the plugin useful, a ⭐ 5-star rating is always appreciated — it helps other store owners discover the plugin. Looking for More Advanced Features? Upgrade to Product Input Fields for WooCommerce Pro to create unlimited global and product-level input fields, apply conditional display rules, show fields based on products or categories, add quantity-based conditions, and unlock additional customization options. See the complete Lite vs Pro comparison: https://www.tychesoftwares.com/differences-between-pro-and-lite-versions-of-product-input-fields-for-woocommerce-plugin/ About Tyche Softwares Tyche Softwares has been building WooCommerce plugins since 2009, helping merchants improve their stores with solutions for product customization, pricing, checkout, delivery scheduling, bookings, and order management. Explore More WooCommerce Plugins Tyche Softwares also develops plugins for abandoned cart recovery, order delivery scheduling, bookings, BOGO offers, invoices and packing slips, custom order numbers, order statuses, payment gateway fees, call for price, currency management, and other WooCommerce store enhancements. Some of our Pro plugins: Flexi BOGO for WooCommerce Abandoned Cart Pro for WooCommerce Booking & Appointment Plugin for WooCommerce Order Delivery Date Pro for WooCommerce Product Delivery Date Pro for WooCommerce Deposits For WooCommerce Payment Gateway Based Fees and Discounts for WooCommerce – Pro Custom Order Status for WooCommerce – Pro Custom Order Numbers for WooCommerce – Pro Call for Price for WooCommerce – Pro Price based on User Role for WooCommerce – Pro Currency per Product for WooCommerce – Pro Some of our other free plugins: Abandoned Cart for WooCommerce Order Delivery Date for WooCommerce – Lite Product Delivery Date for WooCommerce – Lite Payment Gateway Based Fees and Discounts for WooCommerce Custom Order Status for WooCommerce Custom Order Numbers for WooCommerce Call for Price for WooCommerce Price based on User Role for WooCommerce Currency per Product for WooCommerce External Services This plugin communicates with our tracking server to send usage data only if the user has explicitly opted in to usage tracking. For detailed information about what is tracked, please refer to our usage tracking documentation.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C