Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API docsPage
  • MCP serverPage
  • AboutPage
  • Data sourcesPage
  • Data statusPage
  • ChangelogPage
  • How it's builtPage
  • Support the projectPage

14 results

wpclever vulnerabilities

39 published CVEs name wpclever among the affected products.

Atom feed of new CVEs

Newest CVEs

  • CVE-2026-104313

    WPC Estimated Delivery Date for WooCommerce <= 4.0.1 - Reflected Cross-Site Scripting via 'rule_data' Parameter

    wpclever · WPC Estimated Delivery Date for WooCommerce

    Medium6.1
  • CVE-2026-97660

    WPC Product Options for WooCommerce <= 4.0.5 - Unauthenticated Stored Cross-Site Scripting via wpcpo-* Array Key via Multipart Field Name

    wpclever · WPC Product Options for WooCommerce

    High7.2
  • CVE-2026-103888

    WPC Smart Quick View for WooCommerce <= 4.4.0 - Reflected Cross-Site Scripting via 'woosq-redirect' Parameter

    wpclever · WPC Smart Quick View for WooCommerce

    Medium6.1
  • CVE-2026-95687

    WPC Shop as a Customer for WooCommerce <= 2.0.0 - Authenticated (Subscriber+) Privilege Escalation via Missing Role Check on Target User to wpcsa_login AJAX Endpoint

    wpclever · WPC Shop as a Customer for WooCommerce

    High8.8
  • CVE-2026-93836

    WPC Product Bundles for WooCommerce <= 8.6.6 - Unauthenticated Stored Cross-Site Scripting via 'qty' Parameter

    wpclever · WPC Product Bundles for WooCommerce

    High7.2
  • CVE-2026-7436

    WPC Badge Management for WooCommerce <= 3.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'text' Attribute

    wpclever · WPC Badge Management for WooCommerce

    Medium6.4
  • CVE-2026-49061

    WordPress WPC Product Options for WooCommerce plugin <= 3.2.1 - Arbitrary File Download vulnerability

    WPClever · WPC Product Options for WooCommerce

    High7.5
  • CVE-2026-48883

    WordPress WPC Product Bundles for WooCommerce plugin <= 8.5.3 - Broken Access Control vulnerability

    WPClever · WPC Product Bundles for WooCommerce

    High7.5
  • CVE-2025-14767

    WPC Badge Management for WooCommerce <= 3.1.6 - Authenticated (Shop Manager+) Stored Cross-Site Scripting via 'text' Attribute

    wpclever · WPC Badge Management for WooCommerce

    Medium5.5
  • CVE-2026-6725

    WPC Smart Messages for WooCommerce <= 4.2.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attribute

    wpclever · WPC Smart Messages for WooCommerce

    Medium6.4
All 39 in the list