Plugin icon

Product Configurator for WooCommerce

product-configurator-for-woocommerce

Vulnerabilities:

4

Last Updated:

October 24, 2026

Active Installs:

2000

Published
Title
Fixed in
CVSS
Published
2026-10-07
Title
Product Configurator for WooCommerce < 1.7.6 - Authenticated (Shop Manager+) PHP Object Injection
Fixed in
Fixed in 1.7.6
CVSS
6.6 (medium)
Published
2026-06-10
Title
Product Configurator for WooCommerce < 1.7.3 - Unauthenticated Private/Draft Product Data Disclosure via pc_get_data
Fixed in
Fixed in 1.7.3
CVSS
7.5 (high)
Published
2025-07-30
Title
Product Configurator for WooCommerce < 1.5.0 - Cross-Site Request Forgery
Fixed in
Fixed in 1.5.0
CVSS
4.3 (medium)
Published
2022-06-06
Title
Product Configurator for WooCommerce < 1.2.32 - Unauthenticated Arbitrary File Deletion
Fixed in
Fixed in 1.2.32
CVSS
7.5 (high)