WPC Product Options for WooCommerce vulnerabilities

2 known vulnerabilities in WPC Product Options for WooCommerce from Wpclever. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.2 High severity

  WPC Product Options for WooCommerce: Improper Neutralization of Input During Web Page Generation

  CVE-2026-97660Oct 3, 2026Wpclever

  The WPC Product Options for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via wpcpo-* Array Key via Multipart Field Name in all versions up to, and including, 4.0.5 due to insufficient input sanitization and output escaping. Thi

• 7.5 High severity

  WPC Product Options for WooCommerce: Improper Control of Filename for Include/Require Statement in PHP Program

  CVE-2025-60248Nov 6, 2025Wpclever

  Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in WPClever WPC Product Options for WooCommerce wpc-product-options allows PHP Local File Inclusion.This issue affects WPC Product Options for