Advisories · Technology

wpclever WPC Product Bundles for WooCommerce.

Every CVE that names wpclever WPC Product Bundles for WooCommerce among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-93836 CVE record

CVSS 7.2 High

WPC Product Bundles for WooCommerce <= 8.6.6 - Unauthenticated Stored Cross-Site Scripting via 'qty' Parameter
- wpclever WPC Product Bundles for WooCommerce
- Cross-site scripting (XSS)
Not analysed yet 22 Sept 2026
CVE-2026-48883 CVE record

CVSS 7.5 High

WordPress WPC Product Bundles for WooCommerce plugin <= 8.5.3 - Broken Access Control vulnerability
- WPClever WPC Product Bundles for WooCommerce
- Broken access control
Not analysed yet 15 Jun 2026
CVE-2026-32406 CVE record

CVSS 4.3 Medium

WordPress WPC Product Bundles for WooCommerce plugin <= 8.4.5 - Broken Access Control vulnerability
- WPClever WPC Product Bundles for WooCommerce
- Broken access control
Not analysed yet 13 Mar 2026
CVE-2023-52127 CVE record

CVSS 4.3 Medium

WordPress WPC Product Bundles for WooCommerce Plugin <= 7.3.1 is vulnerable to Cross Site Request Forgery (CSRF)
- WPClever WPC Product Bundles for WooCommerce
- Cross-site request forgery (CSRF)
Not analysed yet 5 Jan 2024