{"affected":[{"defaultStatus":"unaffected","ecosystem":"https://wordpress.org/plugins","product":"Advanced Product Fields (Product Addons) for WooCommerce","source":"CNA: WPScan","vendor":"Unknown","versions":[{"lessThan":"1.7.4","status":"affected","version":"1.6.22","versionType":"semver"}]}],"cveId":"CVE-2026-119171","cwes":["CWE-20"],"description":"The Advanced Product Fields (Product Addons) for WooCommerce WordPress plugin from 1.6.22 to 1.7.3 does not validate that a submitted value for a required paid product option matches one of the configured choices, only that it is not empty, allowing unauthenticated users to add a product to the cart and complete an order while skipping the required option's surcharge and paying only the base product price.","epss":null,"exploits":[{"kind":"exploit","source":"CNA: WPScan","url":"https://wpscan.com/vulnerability/e02cc0f2-9f10-4114-b9b5-1e1a2ae18355/"}],"kev":null,"metrics":[{"score":5.3,"severity":"medium","source":"CNA: WPScan","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","version":"3.1"}],"modifiedAt":1794382386987,"publishedAt":1794382386987,"references":[{"source":"CNA: WPScan","tags":["exploit","vdb-entry","technical-description"],"url":"https://wpscan.com/vulnerability/e02cc0f2-9f10-4114-b9b5-1e1a2ae18355/"}],"remediation":[],"revision":"c795c3fce3ef570dc80dc070fa50ec5b96a0af6792a918cefd3bafe7afbc7e23","sources":[{"modifiedAt":1794382386987,"name":"CNA: WPScan","retrievedAt":1794384510671,"url":"https://www.cve.org/CVERecord?id=CVE-2026-119171"}],"ssvc":null,"status":"published","title":"Advanced Product Fields (Product Addons) for WooCommerce 1.6.22 - 1.7.3 - Unauthenticated Paid Option Surcharge Bypass via Add-to-Cart Choice Field","updatedAt":1794384510671}