wpclever vulnerabilities

CVEs per yearBy the year they were published

1. 20231
2. 202413
3. 202513
4. 202612

Newest CVEs

• CVE-2026-104313

  WPC Estimated Delivery Date for WooCommerce <= 4.0.1 - Reflected Cross-Site Scripting via 'rule_data' Parameter

  wpclever · WPC Estimated Delivery Date for WooCommerce

  Medium6.1
• CVE-2026-97660

  WPC Product Options for WooCommerce <= 4.0.5 - Unauthenticated Stored Cross-Site Scripting via wpcpo-* Array Key via Multipart Field Name

  wpclever · WPC Product Options for WooCommerce

  High7.2
• CVE-2026-103888

  WPC Smart Quick View for WooCommerce <= 4.4.0 - Reflected Cross-Site Scripting via 'woosq-redirect' Parameter

  wpclever · WPC Smart Quick View for WooCommerce

  Medium6.1
• CVE-2026-95687

  WPC Shop as a Customer for WooCommerce <= 2.0.0 - Authenticated (Subscriber+) Privilege Escalation via Missing Role Check on Target User to wpcsa_login AJAX Endpoint

  wpclever · WPC Shop as a Customer for WooCommerce

  High8.8
• CVE-2026-93836

  WPC Product Bundles for WooCommerce <= 8.6.6 - Unauthenticated Stored Cross-Site Scripting via 'qty' Parameter

  wpclever · WPC Product Bundles for WooCommerce

  High7.2
• CVE-2026-7436

  WPC Badge Management for WooCommerce <= 3.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'text' Attribute

  wpclever · WPC Badge Management for WooCommerce

  Medium6.4
• CVE-2026-49061

  WordPress WPC Product Options for WooCommerce plugin <= 3.2.1 - Arbitrary File Download vulnerability

  WPClever · WPC Product Options for WooCommerce

  High7.5
• CVE-2026-48883

  WordPress WPC Product Bundles for WooCommerce plugin <= 8.5.3 - Broken Access Control vulnerability

  WPClever · WPC Product Bundles for WooCommerce

  High7.5
• CVE-2025-14767

  WPC Badge Management for WooCommerce <= 3.1.6 - Authenticated (Shop Manager+) Stored Cross-Site Scripting via 'text' Attribute

  wpclever · WPC Badge Management for WooCommerce

  Medium5.5
• CVE-2026-6725

  WPC Smart Messages for WooCommerce <= 4.2.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attribute

  wpclever · WPC Smart Messages for WooCommerce

  Medium6.4