Skip to content
OpenAdvisories
Medium · 4.3 CVE-2026-32406 EUVD-2026-11923GHSA-7rgq-5gwv-qv9h

WordPress WPC Product Bundles for WooCommerce plugin <= 8.4.5 - Broken Access Control vulnerability

Published Mar 13, 2026 · Updated Apr 29, 2026 · Assigned by Patchstack

Description

Missing Authorization vulnerability in WPClever WPC Product Bundles for WooCommerce woo-product-bundle allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WPC Product Bundles for WooCommerce: from n/a through <= 8.4.5.

Affected products

VendorProductAffectedFixed
WPClever WPC Product Bundles for WooCommerce ≤ 8.4.5 —

References