Plugin icon

WPC Product Options for WooCommerce

wpc-product-options

Vulnerabilities:

3

Last Updated:

September 25, 2026

Active Installs:

4000

Published
Title
Fixed in
CVSS
Published
2026-10-02
Title
WPC Product Options for WooCommerce < 4.0.6 - Unauthenticated Stored Cross-Site Scripting via wpcpo-* Array Key via Multipart Field Name
Fixed in
Fixed in 4.0.6
CVSS
7.2 (high)
Published
2026-06-08
Title
WPC Product Options for WooCommerce < 3.2.2 - Unauthenticated Arbitrary File Download
Fixed in
Fixed in 3.2.2
CVSS
7.5 (high)
Published
2025-05-16
Title
WPC Product Options for WooCommerce < 3.1.3 - Authenticated (Subscriber+) Local File Inclusion
Fixed in
Fixed in 3.1.3
CVSS
7.5 (high)