{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/extra-fees-plugin-for-woocommerce--4.4.0/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":[],"_cs_cves":[{"cvss":8.8,"id":"CVE-2026-116866"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["Extra Fees Plugin for WooCommerce (\u003c= 4.4.0)"],"_cs_severities":["high"],"_cs_tags":["web-vulnerability","php-injection","wordpress"],"_cs_type":"advisory","_cs_vendors":[],"content_html":"\u003cp\u003eExtra Fees Plugin for WooCommerce versions 4.4.0 and earlier are vulnerable to a PHP object injection flaw that can be triggered by a contributor-level user.\u003c/p\u003e\n","date_modified":"2026-10-29T17:36:16Z","date_published":"2026-10-29T17:36:16Z","id":"https://feed.craftedsignal.io/briefs/2026-10-extra-fees-injection/","summary":"The Extra Fees Plugin for WooCommerce versions 4.4.0 and below contains a contributor-level PHP object injection vulnerability.","title":"Extra Fees Plugin for WooCommerce: PHP Object Injection (CVE-2026-116866)","url":"https://feed.craftedsignal.io/briefs/2026-10-extra-fees-injection/"}],"language":"en","title":"CraftedSignal Threat Feed - Extra Fees Plugin for WooCommerce (\u003c= 4.4.0)","version":"https://jsonfeed.org/version/1.1"}