CVE-2026-81789: Studio Wombat Advanced Product Fields Extended For Woocommerce

High severity, CVSS 8.6. EPSS: 0.5% chance of exploitation in the next 30 days.

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Studio Wombat Advanced Product Fields Extended for WooCommerce allows Path Traversal. This issue affects Advanced Product Fields Extended for WooCommerce: from n/a through 3.1.6.

Affected products

• Studio Wombat Advanced Product Fields Extended For Woocommerce: up to and including 3.1.6

Published 2026-09-10. Last modified 2026-09-11.