Wp-configurator vulnerabilities
We track 2 vulnerabilities in Wp-configurator products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on March 25, 2026.
2vulnerabilities
0critical
2high
0exploited
8.0average CVSS score
Latest Wp-configurator vulnerabilities
- 7.1 High severity
WP Configurator Pro: Missing Authorization
Missing Authorization vulnerability in wp-configurator WP Configurator Pro wp-configurator-pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Configurator Pro: from n/a through <= 3.7.9.
- 8.8 High severity
Configurator Theme Core: Improper Privilege Management
The Configurator Theme Core plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 1.4.7. This is due to the plugin not properly validating user meta fields prior to updating them in the database. This makes it possibl