HDWebmobile Product Specifications
Add a specifications table to any product — editable only by users who can edit that specific product.
Overview
HDWebmobile Product Specifications adds a “Specifications” tab to a product’s edit screen, where you list label / value rows — “Material: 100% cotton”, “Weight: 200g”. A matching “Specifications” tab appears on the product page automatically whenever a product has any rows.
The “Product Specifications for WooCommerce” plugin family (CVE-2026-11364) had an authentication-bypass flaw: an authenticated attacker — not necessarily anyone entitled to edit that specific product — could modify product data. This plugin is built so that mistake has nowhere to happen: specifications are saved only through WooCommerce’s own product-data-panel mechanism, which itself only ever runs from inside WordPress’s own post-save flow for the exact product being edited — already gated by WordPress core’s current_user_can('edit_post', $post_id). The save method checks it again anyway, independently verifying current_user_can('edit_product', $product_id) for the specific product id it’s given, rather than trusting the call path was safe. Every value is plain, escaped text — there is no rich-text or HTML field.
Key Features
- Any number of label/value specification rows per product
- A native “Specifications” tab on the product page, next to Description and Reviews
- Nothing to configure store-wide — specifications live entirely on each product
- No new database table
Limitations
Please read before installing:
- Plain label/value pairs only — no nested groups or multi-column tables
- No specification templates shared across multiple products in this version
- No import/export of specifications
Quick Setup
- Upload the plugin files to the /wp-content/plugins/hdwebmobile-product-specifications directory, or install through the Plugins screen directly.
- Activate the plugin through the ‘Plugins’ screen in WordPress. WooCommerce must already be installed and active.
- Edit any product, open the new “Specifications” tab in Product Data, and add your rows.
Latest Version
Current stable version in readme: 1.0.0 (Initial release: per-product specification rows, double-checked per-product edit capability, no HTML/rich-text fields.)
See our other WordPress plugins for more WooCommerce and site-utility tools.