CVE-2026-102392

Shop manager PHP Object Injection in Extra Product Options For WooCommerce | Custom Product Addons and Fields <= 3.3.8 versions.

  • Published Sep 30, 2026
  • CVSS 7.2 high
  • 0.3% chance of exploitation in the next 30 days (EPSS)

Affected software

CVE-2026-102392 at the National Vulnerability Database