Skip to content
OpenAdvisories
Medium · 5.3 CVE-2026-110377 EUVD-2026-109712GHSA-hhc7-7647-r8v2

WordPress Bopo – WooCommerce Product Bundle Builder plugin <= 1.2.3 - Broken Access Control vulnerability

Published Oct 26, 2026 · Updated Oct 26, 2026 · Assigned by Patchstack

Description

Missing Authorization vulnerability in VillaTheme Bopo – WooCommerce Product Bundle Builder bopo-woo-product-bundle-builder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Bopo – WooCommerce Product Bundle Builder: from n/a through 1.2.3.

Affected products

VendorProductAffectedFixed
VillaTheme Bopo – WooCommerce Product Bundle Builder ≤ 1.2.3 —

References