Bopo – WooCommerce Product Bundle Builder vulnerabilities

Product

Bopo – WooCommerce Product Bundle Builder

by VillaTheme · last CVE Oct 26, 2026

CVEs

On KEV

7.1

Max CVSS

New 30D

Severity mix

Critical 0High 1Medium 2Low 0

Severity

Exploitation

Watch

Add Bopo – WooCommerce Product Bundle Builder to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-57422	7.1	0%	Jul 13	WordPress Bopo – WooCommerce Product Bundle Builder plugin <= 1.2.0 - Reflected Cross Site Scripting (XSS) vulnerability Affected: through 1.2.0
CVE-2026-110377 New	5.3	0%	Oct 26	WordPress Bopo – WooCommerce Product Bundle Builder plugin <= 1.2.3 - Broken Access Control vulnerability Affected: through 1.2.3
CVE-2026-57664	4.3	0%	Jun 26	WordPress Bopo – WooCommerce Product Bundle Builder plugin <= 1.1.6 - Sensitive Data Exposure vulnerability Affected: through 1.1.6