← All advisories

High severity8.2NVD Advisory· Published Dec 28, 2023· Updated Apr 28, 2026

CVE-2023-32795

CVE-2023-32795

Description

Deserialization of Untrusted Data vulnerability in WooCommerce Product Add-Ons.This issue affects Product Add-Ons: from n/a through 6.1.3.

Affected products

2

WooCommerce/Product Addons
cpe:2.3:a:woocommerce:product_addons:*:*:*:*:*:wordpress:*:*
Range: <=6.1.3
Yithemes/Yith Woocommerce Product Add Onsllm-fuzzy
Range: <=6.1.3

Patches

Vulnerability mechanics

References

1

patchstack.com/database/vulnerability/woocommerce-product-addons/wordpress-woocommerce-product-add-ons-plugin-6-1-3-authenticated-php-object-injection-vulnerabilitynvdThird Party Advisory

News mentions

0

No linked articles in our index yet.