Approved changes feed: RSS · Atom

cpe:2.3:a:villatheme:bopo_–_woocommerce_product_bundle_builder:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorVillatheme (f6e46fcf-f7b5-547b-bdd5-2c693fe77a08)
ProductBopo – Woocommerce Product Bundle Builder (1f76dfaa-dd72-5b6d-b322-7335771a075b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-110377 vulnerable 2026-11-03 10:16:00.852683 WordPress Bopo – WooCommerce Product Bundle Builder plugin <= 1.2.3 - Broken Access Control vulnerability
MEDIUM (5.3)
Missing Authorization vulnerability in VillaTheme Bopo – WooCommerce Product Bundle Builder bopo-woo-product-bundle-builder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Bopo – WooCommerce Product Bundle Builder: from n/a through 1.2.3.
Published: 2026-10-26T09:59:47.003Z
Updated: 2026-10-26T10:23:41.157Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-57664 vulnerable 2026-07-29 01:03:15.870417 WordPress Bopo – WooCommerce Product Bundle Builder plugin <= 1.1.6 - Sensitive Data Exposure vulnerability
MEDIUM (4.3)
Unauthenticated Sensitive Data Exposure in Bopo – WooCommerce Product Bundle Builder <= 1.1.6 versions.
Published: 2026-06-26T14:53:30.734Z
Updated: 2026-06-26T15:31:21.319Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-57422 vulnerable 2026-07-29 01:00:29.776420 WordPress Bopo – WooCommerce Product Bundle Builder plugin <= 1.2.0 - Reflected Cross Site Scripting (XSS) vulnerability
HIGH (7.1)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in VillaTheme Bopo – WooCommerce Product Bundle Builder bopo-woo-product-bundle-builder allows Reflected XSS.This issue affects Bopo – WooCommerce Product Bundle Builder: from n/a through <= 1.2.0.
Published: 2026-07-13T08:41:24.464Z
Updated: 2026-07-13T13:43:11.695Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.