Skip to content
Threat Feed
Subscribe

Product

Extra Fees Plugin for WooCommerce (<= 4.4.0)

1 brief RSS
high advisory

Extra Fees Plugin for WooCommerce: PHP Object Injection (CVE-2026-116866)

The Extra Fees Plugin for WooCommerce versions 4.4.0 and below contains a contributor-level PHP object injection vulnerability.

Extra Fees Plugin for WooCommerce web-vulnerability php-injection wordpress
1c