Product Specifications for Woocommerce

Product Specifications for Woocommerce has 2 disclosed vulnerabilities in the WordSec catalog, reported between 2023 and 2026; all 2 are fixed as of September 2026. Their average CVSS score is 5.2, and the most serious one scores 6.1 out of 10.

The most common weakness is Cross-Site Scripting, behind 1 of the records (50%). Other recurring categories include Missing Authorization.

Every one of the 2 issues recorded for Product Specifications for Woocommerce has a vendor fix available, so running the current release closes all known holes.

2 independent researchers contributed these findings, one record each. Product Specifications for Woocommerce is installed on roughly 1,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.4.

Strategic Overview

Avg CVSSMedium

5.2/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Product Specifications for Woocommerce vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.1CVE-2022-46858

Product Specifications for Woocommerce <= 0.6.0 - Reflected Cross-Site Scripting via Arbitrary Query String Parameter

Read the full analysis

Vulnerability Records

2 records


2026-06-26 17:56	Product Specifications for Woocommerce <= 0.8.9 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Attribute/Group Creation, Modification, and Deletion via 'dwps_modify_groups' and 'dwps_modify_attributes' AJAX Actions Product Specifications for Woocommerce <= 0.8.9	`CVE-2026-11364`	4.3 Medium	dyingman	Yes
2023-03-28 00:00	Product Specifications for Woocommerce <= 0.6.0 - Reflected Cross-Site Scripting via Arbitrary Query String Parameter Product Specifications for Woocommerce <= 0.6.0	`CVE-2022-46858`	6.1 Medium	TEAM WEBoB of BoB 11th	Yes

Showing 1–2 of 2 reports

Plugin Profile

Latestv0.8.10

Product Specifications for Woocommerce

Author

Dornaweb

4.7(26)

94/100

Last Updated

2026-06-20 (3mo ago)

Active Installs

1,000+

Downloads

48,317

Requires WP

5.9+

Requires PHP

7.4+

Tested up to

WP 7.0.4

Created

2017-01-18 (10y ago)

Requires Plugins

woocommerce

With Product Specifications plugin you can easily create spec. tables for your products. you can create multiple tables so you can use them for different types of products. Product Specifications is very light-weight and easy to customize. Translation To contribute in translating this plugin please visit: WordPress Translation Repository Development Product specifications development takes place under its Github Repository, Contributions are more than welcome.

View on WordPress.org