Description
Unauthenticated Sensitive Data Exposure in Bopo – WooCommerce Product Bundle Builder <= 1.1.6 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| VillaTheme | Bopo – WooCommerce Product Bundle Builder | ≤ 1.1.6 | — |
Medium · 4.3
CVE-2026-57664
EUVD-2026-39669GHSA-xfmv-28cq-q6w3
WordPress Bopo – WooCommerce Product Bundle Builder plugin <= 1.1.6 - Sensitive Data Exposure vulnerability
Published Jun 26, 2026 · Updated Jun 26, 2026 · Assigned by Patchstack