What’s Vulnerable › Products

WPClever WPC Product Bundles for WooCommerce vulnerabilities

6 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your WPClever WPC Product Bundles for WooCommerce version is affected

Latest WPClever WPC Product Bundles for WooCommerce vulnerabilities

• CVE-2026-93836 — WPC Product Bundles for WooCommerce <= 8.6.6 - Unauthenticated Stored Cross-Site Scripting via 'qty' Parameter (CVSS 7.2)
• CVE-2026-48883 — WordPress WPC Product Bundles for WooCommerce plugin <= 8.5.3 - Broken Access Control vulnerability (CVSS 7.5)
• CVE-2026-32406 — WordPress WPC Product Bundles for WooCommerce plugin <= 8.4.5 - Broken Access Control vulnerability (CVSS 4.3)
• CVE-2024-2838 — WPC Composite Products for WooCommerce <= 7.2.7 - Authenticated (Subscriber+) Stored Cross-Site Scripting (CVSS 6.4)
• CVE-2024-32687 — WordPress WPC Frequently Bought Together for WooCommerce plugin <= 7.0.3 - Broken Access Control vulnerability (CVSS 4.3)
• CVE-2023-52127 — WordPress WPC Product Bundles for WooCommerce Plugin <= 7.3.1 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 8.8)