Log in Start free

WPClever

Products

ProductCVEsExploitedLatest
WPC Smart Quick View for WooCommerce5–Oct 3, 2026
WPC Smart Wishlist for WooCommerce4–Mar 13, 2026
WPC Product Bundles for WooCommerce4–Sep 22, 2026
WPC Smart Messages for WooCommerce4–Apr 28, 2026
WPC Product Options for WooCommerce3–Oct 3, 2026
WPC Badge Management for WooCommerce3–Jul 29, 2026
WPC Shop as a Customer for WooCommerce3–Oct 1, 2026
WPC Frequently Bought Together for WooCommerce2–Nov 1, 2024
WPC Smart Compare for WooCommerce2–Aug 19, 2025
WPC Smart Linked Products - Upsells & Cross-sells for WooCommerce1–Apr 1, 2025
WPC Admin Columns1–Apr 12, 2025
WPC Composite Products for WooCommerce1–Apr 27, 2024
WPC Estimated Delivery Date for WooCommerce1–Oct 3, 2026
WPC Countdown Timer for WooCommerce1–Oct 22, 2025
WPC Grouped Product for WooCommerce1–Apr 17, 2024
WPC Name Your Price for WooCommerce1–Oct 31, 2025
WPC Order Notes for WooCommerce1–Dec 11, 2024
WPC Smart Upsell Funnel for WooCommerce1–Mar 27, 2025

Exploited and recent CVEs

  • CVE-2026-104313 Medium 6.1 WPC Estimated Delivery Date for WooCommerce <= 4.0.1 - Reflected Cross-Site Scripting via 'rule_data' Parameter 0.2%
  • CVE-2026-97660 High 7.2 WPC Product Options for WooCommerce <= 4.0.5 - Unauthenticated Stored Cross-Site Scripting via wpcpo-* Array Key via Multipart Field Name 0.3%
  • CVE-2026-103888 Medium 6.1 WPC Smart Quick View for WooCommerce <= 4.4.0 - Reflected Cross-Site Scripting via 'woosq-redirect' Parameter 0.3%
  • CVE-2026-95687 High 8.8 WPC Shop as a Customer for WooCommerce <= 2.0.0 - Authenticated (Subscriber+) Privilege Escalation via Missing Role Check on Target User to wpcsa_login AJAX Endpoint 0.5%
  • CVE-2026-93836 High 7.2 WPC Product Bundles for WooCommerce <= 8.6.6 - Unauthenticated Stored Cross-Site Scripting via 'qty' Parameter 0.4%
  • CVE-2026-7436 Medium 6.4 WPC Badge Management for WooCommerce <= 3.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'text' Attribute 0.3%
  • CVE-2026-49061 High 7.5 WordPress WPC Product Options for WooCommerce plugin <= 3.2.1 - Arbitrary File Download vulnerability 0.4%
  • CVE-2026-48883 High 7.5 WordPress WPC Product Bundles for WooCommerce plugin <= 8.5.3 - Broken Access Control vulnerability 0.2%
  • CVE-2025-14767 Medium 5.5 WPC Badge Management for WooCommerce <= 3.1.6 - Authenticated (Shop Manager+) Stored Cross-Site Scripting via 'text' Attribute 0.2%
  • CVE-2026-6725 Medium 6.4 WPC Smart Messages for WooCommerce <= 4.2.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attribute 0.2%
  • CVE-2026-32407 Medium 4.3 WordPress WPC Smart Wishlist for WooCommerce plugin <= 5.0.8 - Broken Access Control vulnerability 0.2%
  • CVE-2026-32406 Medium 4.3 WordPress WPC Product Bundles for WooCommerce plugin <= 8.4.5 - Broken Access Control vulnerability 0.2%
  • CVE-2025-60248 High 7.5 WordPress WPC Product Options for WooCommerce plugin <= 3.1.3 - Local File Inclusion vulnerability 0.5%
  • CVE-2025-12115 High 7.5 WPC Name Your Price for WooCommerce <= 2.1.9 - Unauthenticated Price Alteration 0.3%
  • CVE-2025-62903 Medium 6.5 WordPress WPC Smart Messages for WooCommerce plugin <= 4.2.8 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2025-49908 Medium 6.5 WordPress WPC Countdown Timer for WooCommerce plugin <= 3.1.4 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2025-11741 Medium 5.3 WPC Smart Quick View for WooCommerce <= 4.2.5 - Insecure Direct Object Reference to Unauthenticated Private Product Exposure 0.3%
  • CVE-2025-11742 Medium 4.3 WPC Smart Wishlist for WooCommerce <= 5.0.4 - Missing Authorization to Authenticated (Subscriber+) Information Exposure 0.3%
  • CVE-2025-11518 Medium 5.3 WPC Smart Wishlist for WooCommerce <= 5.0.3 - Insecure Direct Object Reference to Unauthenticated Wishlist Manipulation 0.2%
  • CVE-2025-8618 Medium 6.4 WPC Smart Quick View for WooCommerce <= 4.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via woosq_btn Shortcode 0.2%
  • CVE-2025-7496 Medium 6.4 WPC Smart Compare for WooCommerce <= 6.4.7 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting 0.2%
  • CVE-2025-5530 Medium 6.4 WPC Smart Compare for WooCommerce <= 6.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.3%
  • CVE-2025-3418 High 8.8 WPC Admin Columns 2.0.6 - 2.1.0 - Authenticated (Subscriber+) Privilege Escalation via User Meta Update 0.4%
  • CVE-2025-30825 High 8.8 WordPress WPC Smart Linked Products plugin <= 1.3.5 - Privilege Escalation vulnerability 0.5%
  • CVE-2025-30772 High 8.8 WordPress WPC Smart Upsell Funnel for WooCommerce plugin <= 3.0.4 - Arbitrary Option Update to Privilege Escalation vulnerability 0.6%
  • CVE-2024-12432 High 8.1 WPC Shop as a Customer for WooCommerce <= 1.2.8 - Authentication Bypass Due to Insufficiently Unique Key 0.6%
  • CVE-2024-12004 Medium 6.1 WPC Order Notes for WooCommerce <= 1.5.2 - Cross-Site Request Forgery to Reflected Cross-Site Scripting 0.2%
  • CVE-2024-5020 Medium 6.4 Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via FancyBox JavaScript Library 0.4%
  • CVE-2024-43312 Medium 5.4 WordPress WPC Frequently Bought Together for WooCommerce plugin <= 7.1.9 - Broken Access Control vulnerability 0.4%
  • CVE-2024-10437 Medium 4.3 WPC Smart Messages for WooCommerce <= 4.2.1 - Missing Authorization to Authenticated (Subscriber+) Message Activation/Deactivation 0.4%