Studio Wombat vulnerabilities and threats

2 threats

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	8.6	EPSS 0.5%	CVE-2026-81789Advanced Product Fields Extended for WooCommerce (WordPress plugin) · Path Traversal High8.6EPSS 0.5%2026-09-10CVE Database V5CVE-2026-81789 CVE-2026-81789 is a path traversal vulnerability in Studio Wombat's Advanced Product Fields Extended for WooCommerce plugin. It allows an attacker to improperly access files outside the intended restricted directory. The vulnerability affects versions up to 3.1.6. The CVSS score is 8.6, indicating high severity with network attack vector, low attack complexity, no privileges or user interaction required, and impact on availability. No patch or remediation information is currently provided. EPSS 0.5%Vulnerability Studio Wombat CWE-22	CVE Database V5	2026-09-10
Medium	4.3	EPSS 0.3%	CVE-2026-57649Shoppable Images Lite (WordPress plugin) · Missing Authorization Medium4.3EPSS 0.3%2026-06-26CVE Database V5CVE-2026-57649 Subscriber Broken Access Control in Shoppable Images Lite <= 1.3 versions. EPSS 0.3%Vulnerability studiowombat CWE-862	CVE Database V5	2026-06-26

Page 1 of 1