Plugin icon

WPC Shop as a Customer for WooCommerce

wpc-shop-as-customer

Vulnerabilities:

3

Last Updated:

September 23, 2026

Active Installs:

400

Published
Title
Fixed in
CVSS
Published
2026-09-30
Title
WPC Shop as a Customer for WooCommerce < 2.0.1 - Authenticated (Subscriber+) Privilege Escalation via Missing Role Check on Target User to wpcsa_login AJAX Endpoint
Fixed in
Fixed in 2.0.1
CVSS
8.8 (high)
Published
2024-12-17
Title
WPC Shop as a Customer for WooCommerce < 1.2.9 - Authentication Bypass Due to Insufficiently Unique Key
Fixed in
Fixed in 1.2.9
CVSS
8.1 (high)
Published
2024-10-24
Title
WPC Shop as a Customer for WooCommerce < 1.2.7 - Authenticated (Subscriber+) PHP Object Injection
Fixed in
Fixed in 1.2.7
CVSS
8.8 (high)