Addify vulnerabilities

Products

• abandoned cart recovery 1
• advanced free gifts 1
• checkout fields manager 1
• custom fields for woocommerce 1
• custom order number 1
• custom registration forms builder 1
• Custom User Registration Fields for WooCommerce 1
• gift registry for woocommerce 1
• image watermark for woocommerce 1
• order approval for woocommerce 1
• order tracking for woocommerce 1
• price calculator for woocommerce 1
• product dynamic pricing and discounts 1
• product labels and stickers 1
• Request a Quote for WooCommerce 1
• Tax Exempt for WooCommerce 1

Latest Addify CVEs

Newest publication first

1. CVE-2026-18143 Request a Quote for WooCommerce <= 2.9.2 - Unauthenticated Arbitrary File Upload via AJAX Popup Handler

   Published 2026-09-26

   Critical·CVSS 9.8

   The Request a Quote for WooCommerce plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 2.9.2 via the afrfq_submit_quote_via_popup() function. This is due to missing file extension and MIME type validation in the popup upload handler,...

2. CVE-2026-15369 Custom User Registration Fields for WooCommerce <= 2.2.3 - Unauthenticated Privilege Escalation via 'afreg_select_user_role' Parameter in Store API Checkout

   Published 2026-08-29

   Critical·CVSS 9.8

   The Custom User Registration Fields for WooCommerce plugin for WordPress is vulnerable to Privilege Escalation in versions up to, and including, 2.2.3. This is due to the plugin accepting an attacker-controlled afreg_select_user_role value from the unauthenticated WooCommerce Sto...

3. CVE-2026-49779 WordPress Tax Exempt for WooCommerce plugin < 1.9.5 - Path Traversal vulnerability

   Published 2026-07-02

   Medium·CVSS 6.5

   Path Traversal: '.../...//' vulnerability in Addify Tax Exempt for WooCommerce allows Path Traversal. This issue affects Tax Exempt for WooCommerce: from n/a before 1.9.5.

4. CVE-2022-4888 Multiple Plugins from Addify - Multiple CSRF

   Published 2023-07-31

   Medium·CVSS 6.5

   The Checkout Fields Manager WordPress plugin before 1.0.2, Abandoned Cart Recovery WordPress plugin before 1.2.5, Custom Fields for WooCommerce WordPress plugin before 1.0.4, Custom Order Number WordPress plugin through 1.0.1, Custom Registration Forms Builder WordPress plugin be...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.