Advisories · Technology

wpclever WPC Product Options for WooCommerce.

Every CVE that names wpclever WPC Product Options for WooCommerce among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-97660 CVE record

CVSS 7.2 High

WPC Product Options for WooCommerce <= 4.0.5 - Unauthenticated Stored Cross-Site Scripting via wpcpo-* Array Key via Multipart Field Name
- wpclever WPC Product Options for WooCommerce
- Cross-site scripting (XSS)
Not analysed yet 3 Oct 2026
CVE-2026-49061 CVE record

CVSS 7.5 High

WordPress WPC Product Options for WooCommerce plugin <= 3.2.1 - Arbitrary File Download vulnerability
- WPClever WPC Product Options for WooCommerce
- Path traversal
Not analysed yet 15 Jun 2026
CVE-2025-60248 CVE record

CVSS 7.5 High

WordPress WPC Product Options for WooCommerce plugin <= 3.1.3 - Local File Inclusion vulnerability
- WPClever WPC Product Options for WooCommerce
- File inclusion
Not analysed yet 6 Nov 2025