Login Request a demo
WP
Vendor
wpclever
18 products with CVEs on record
43
CVEs
0
On KEV
4
New 30D
Products
WS
WPC Smart Quick View for WooCommerce
wpclever
6.4
5 CVEs0 on KEV1 new
WP
WPC Product Options for WooCommerce
wpclever
7.5
3 CVEs0 on KEV1 new
WS
WPC Shop as a Customer for WooCommerce
wpclever
8.8
3 CVEs0 on KEV1 new
WE
WPC Estimated Delivery Date for WooCommerce
wpclever
6.1
1 CVEs0 on KEV1 new
WP
WPC Product Bundles for WooCommerce
wpclever
8.8
6 CVEs0 on KEV0 new
WS
WPC Smart Wishlist for WooCommerce
wpclever
8.8
6 CVEs0 on KEV0 new
WS
WPC Smart Messages for WooCommerce
wpclever
8.8
4 CVEs0 on KEV0 new
WB
WPC Badge Management for WooCommerce
wpclever
8.8
3 CVEs0 on KEV0 new
WF
WPC Frequently Bought Together for WooCommerce
WPClever
8.8
2 CVEs0 on KEV0 new
WS
WPC Smart Compare for WooCommerce
wpclever
6.4
2 CVEs0 on KEV0 new
WA
WPC Admin Columns
wpclever
8.8
1 CVEs0 on KEV0 new
WC
WPC Composite Products for WooCommerce
wpclever
6.4
1 CVEs0 on KEV0 new
WC
WPC Countdown Timer for WooCommerce
WPClever
6.5
1 CVEs0 on KEV0 new
WG
WPC Grouped Product for WooCommerce
WPClever
4.3
1 CVEs0 on KEV0 new
WN
WPC Name Your Price for WooCommerce
wpclever
7.5
1 CVEs0 on KEV0 new
WO
WPC Order Notes for WooCommerce
wpclever
6.1
1 CVEs0 on KEV0 new
WS
WPC Smart Linked Products - Upsells & Cross-sells for WooCommerce
WPClever
8.8
1 CVEs0 on KEV0 new
WS
WPC Smart Upsell Funnel for WooCommerce
WPClever
8.8
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-104313
WE
WPC Estimated Delivery Date for WooCommerce
wpclever
6.1
0%
Oct 3WPC Estimated Delivery Date for WooCommerce <= 4.0.1 - Reflected Cross-Site Scripting via 'rule_data' Parameter
CVE-2026-97660
WP
WPC Product Options for WooCommerce
wpclever
7.2
0%
Oct 3WPC Product Options for WooCommerce <= 4.0.5 - Unauthenticated Stored Cross-Site Scripting via wpcpo-* Array Key via Multipart Field Name
CVE-2026-103888
WS
WPC Smart Quick View for WooCommerce
wpclever
6.1
0%
Oct 3WPC Smart Quick View for WooCommerce <= 4.4.0 - Reflected Cross-Site Scripting via 'woosq-redirect' Parameter
CVE-2026-95687
WS
WPC Shop as a Customer for WooCommerce
wpclever
8.8
0%
Oct 1WPC Shop as a Customer for WooCommerce <= 2.0.0 - Authenticated (Subscriber+) Privilege Escalation via Missing Role Check on Target User to wpcsa_login AJAX Endpoint
CVE-2026-93836
WP
WPC Product Bundles for WooCommerce
wpclever
7.2
0%
Sep 22WPC Product Bundles for WooCommerce <= 8.6.6 - Unauthenticated Stored Cross-Site Scripting via 'qty' Parameter
CVE-2026-7436
WB
WPC Badge Management for WooCommerce
wpclever
6.4
0%
Jul 29WPC Badge Management for WooCommerce <= 3.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'text' Attribute
CVE-2026-49061
WP
WPC Product Options for WooCommerce
WPClever
7.5
0%
Jun 15WordPress WPC Product Options for WooCommerce plugin <= 3.2.1 - Arbitrary File Download vulnerability
CVE-2026-48883
WP
WPC Product Bundles for WooCommerce
WPClever
7.5
0%
Jun 15WordPress WPC Product Bundles for WooCommerce plugin <= 8.5.3 - Broken Access Control vulnerability
CVE-2025-14767
WB
WPC Badge Management for WooCommerce
wpclever
5.5
0%
May 13WPC Badge Management for WooCommerce <= 3.1.6 - Authenticated (Shop Manager+) Stored Cross-Site Scripting via 'text' Attribute
CVE-2026-6725
WS
WPC Smart Messages for WooCommerce
wpclever
6.4
0%
Apr 28WPC Smart Messages for WooCommerce <= 4.2.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attribute
CVE-2026-32407
WS
WPC Smart Wishlist for WooCommerce
WPClever
4.3
0%
Mar 13WordPress WPC Smart Wishlist for WooCommerce plugin <= 5.0.8 - Broken Access Control vulnerability
CVE-2026-32406
WP
WPC Product Bundles for WooCommerce
WPClever
4.3
0%
Mar 13WordPress WPC Product Bundles for WooCommerce plugin <= 8.4.5 - Broken Access Control vulnerability
CVE-2025-60248
WP
WPC Product Options for WooCommerce
WPClever
7.5
0%
Nov 6WordPress WPC Product Options for WooCommerce plugin <= 3.1.3 - Local File Inclusion vulnerability
CVE-2025-12115
WN
WPC Name Your Price for WooCommerce
wpclever
7.5
0%
Oct 31WPC Name Your Price for WooCommerce <= 2.1.9 - Unauthenticated Price Alteration
CVE-2025-62903
WS
WPC Smart Messages for WooCommerce
WPClever
6.5
0%
Oct 27WordPress WPC Smart Messages for WooCommerce plugin <= 4.2.8 - Cross Site Scripting (XSS) vulnerability
CVE-2025-49908
WC
WPC Countdown Timer for WooCommerce
WPClever
6.5
0%
Oct 22WordPress WPC Countdown Timer for WooCommerce plugin <= 3.1.4 - Cross Site Scripting (XSS) vulnerability
CVE-2025-11741
WS
WPC Smart Quick View for WooCommerce
wpclever
5.3
0%
Oct 18WPC Smart Quick View for WooCommerce <= 4.2.5 - Insecure Direct Object Reference to Unauthenticated Private Product Exposure
CVE-2025-11742
WS
WPC Smart Wishlist for WooCommerce
wpclever
4.3
0%
Oct 18WPC Smart Wishlist for WooCommerce <= 5.0.4 - Missing Authorization to Authenticated (Subscriber+) Information Exposure
CVE-2025-11518
WS
WPC Smart Wishlist for WooCommerce
wpclever
5.3
0%
Oct 11WPC Smart Wishlist for WooCommerce <= 5.0.3 - Insecure Direct Object Reference to Unauthenticated Wishlist Manipulation
CVE-2025-8618
WS
WPC Smart Quick View for WooCommerce
wpclever
6.4
0%
Aug 20WPC Smart Quick View for WooCommerce <= 4.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via woosq_btn Shortcode
CVE-2025-7496
WS
WPC Smart Compare for WooCommerce
wpclever
6.4
0%
Aug 19WPC Smart Compare for WooCommerce <= 6.4.7 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting
CVE-2025-5530
WS
WPC Smart Compare for WooCommerce
wpclever
5.4
0%
Jul 11WPC Smart Compare for WooCommerce <= 6.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2025-3418
WA
WPC Admin Columns
wpclever
8.8
0%
Apr 12WPC Admin Columns 2.0.6 - 2.1.0 - Authenticated (Subscriber+) Privilege Escalation via User Meta Update
CVE-2025-30825
WS
WPC Smart Linked Products - Upsells & Cross-sells for WooCommerce
WPClever
8.8
1%
Apr 1WordPress WPC Smart Linked Products plugin <= 1.3.5 - Privilege Escalation vulnerability
CVE-2025-30772
WS
WPC Smart Upsell Funnel for WooCommerce
WPClever
8.8
1%
Mar 27WordPress WPC Smart Upsell Funnel for WooCommerce plugin <= 3.0.4 - Arbitrary Option Update to Privilege Escalation vulnerability
CVE-2024-12432
WS
WPC Shop as a Customer for WooCommerce
wpclever
8.1
1%
Dec 18WPC Shop as a Customer for WooCommerce <= 1.2.8 - Authentication Bypass Due to Insufficiently Unique Key
CVE-2024-12004
WO
WPC Order Notes for WooCommerce
wpclever
6.1
0%
Dec 11WPC Order Notes for WooCommerce <= 1.5.2 - Cross-Site Request Forgery to Reflected Cross-Site Scripting
CVE-2024-5020
WS
WPC Smart Quick View for WooCommerce
wpclever
6.4
0%
Dec 4Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via FancyBox JavaScript Library
CVE-2024-43312
WF
WPC Frequently Bought Together for WooCommerce
WPClever
8.8
0%
Nov 1WordPress WPC Frequently Bought Together for WooCommerce plugin <= 7.1.9 - Broken Access Control vulnerability
CVE-2024-10437
WS
WPC Smart Messages for WooCommerce
wpclever
4.3
0%
Oct 29WPC Smart Messages for WooCommerce <= 4.2.1 - Missing Authorization to Authenticated (Subscriber+) Message Activation/Deactivation
CVE-2024-10436
WS
WPC Smart Messages for WooCommerce
wpclever
8.8
1%
Oct 29WPC Smart Messages for WooCommerce <= 4.2.1 - Authenticated (Subscriber+) Local File Inclusion
CVE-2024-50416
WS
WPC Shop as a Customer for WooCommerce
WPClever
8.8
1%
Oct 28WordPress WPC Shop as a Customer for WooCommerce plugin <= 1.2.6 - PHP Object Injection vulnerability
CVE-2024-30537
WB
WPC Badge Management for WooCommerce
WPClever
8.8
0%
Jun 9WordPress WPC Badge Management for WooCommerce plugin <= 2.4.0 - Broken Access Control vulnerability
CVE-2024-2838
WC
WPC Composite Products for WooCommerce
wpclever
6.4
0%
Apr 27WPC Composite Products for WooCommerce <= 7.2.7 - Authenticated (Subscriber+) Stored Cross-Site Scripting
CVE-2024-32687
WF
WPC Frequently Bought Together for WooCommerce
WPClever
4.3
0%
Apr 22WordPress WPC Frequently Bought Together for WooCommerce plugin <= 7.0.3 - Broken Access Control vulnerability
CVE-2024-32520
WG
WPC Grouped Product for WooCommerce
WPClever
4.3
0%
Apr 17WordPress WPC Grouped Product for WooCommerce plugin <= 4.4.2 - Broken Access Control vulnerability
CVE-2023-6494
WS
WPC Smart Quick View for WooCommerce
wpclever
4.4
0%
Apr 13WPC Smart Quick View for WooCommerce <= 4.0.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
CVE-2023-52127
WP
WPC Product Bundles for WooCommerce
WPClever
8.8
0%
Jan 5WordPress WPC Product Bundles for WooCommerce Plugin <= 7.3.1 is vulnerable to Cross Site Request Forgery (CSRF)
CVE-2023-34386
WS
WPC Smart Wishlist for WooCommerce
WPClever
8.8
0%
Nov 9WordPress WPC Smart Wishlist for WooCommerce Plugin <= 4.7.1 is vulnerable to Cross Site Request Forgery (CSRF)
CVE-2022-1465
WS
Wpc Smart Wishlist For Woocommerce
Wpclever
6.1
1%
May 16WPC Smart Wishlist for WooCommerce < 2.9.9 - Reflected Cross-Site Scripting
CVE-2022-0397
WS
Wpc Smart Wishlist For Woocommerce
Wpclever
5.4
1%
Mar 28WPC Smart Wishlist for WooCommerce < 2.9.4 - Reflected Cross-Site Scripting