The Product Addons & Fields for WooCommerce plugin for WordPress has a security issue that affects all versions up to and including 32.0.20. This means that the plugin does not properly check a certain field that can be changed, making it possible for anyone to insert their own content without being logged in.