Threats tagged 'ghsa-r9r2-c6x9-7wrp'

The Advanced Product Fields (Product Addons) for WooCommerce WordPress plugin versions 1.6.22 through 1.7.3 contains a vulnerability where required paid product options are not properly validated. This allows unauthenticated users to add products to the cart and complete orders without paying the surcharge for required options, paying only the base product price.