CVE Tools
Track your stack

Wpclever

10 CVEs tracked since 2025. Since Oct 2025, none of them reached CISA KEV.

Wpclever CVEs per month

Oct 2025 to Oct 2026. Point at a month, or focus the strip and use the arrow keys.
Wpclever CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2025-1060
2025-114 or fewer
2025-125 or fewer
2026-015 or fewer
2026-025 or fewer
2026-037 or fewer
2026-046 or fewer
2026-057 or fewer
2026-067 or fewer
2026-077 or fewer
2026-088 or fewer
2026-099 or fewer
2026-1040

Products

The products that kept showing up in Wpclever's monthly top three, with their CVEs summed over those months.

  1. Wpc Smart Wishlist For Woocommerce21 month
  2. Wpc Estimated Delivery Date For Woocommerce11 month
  3. Wpc Name Your Price For Woocommerce11 month
  4. Wpc Product Options For Woocommerce11 month
  5. Wpc Shop As A Customer For Woocommerce11 month
  6. Wpc Smart Quick View For Woocommerce11 month

Latest CVEs

The 15 most recently published vulnerabilities affecting Wpclever.

  1. CVE-2026-104313WPC Estimated Delivery Date for WooCommerce <= 4.0.1 - Reflected Cross-Site Scripting via 'rule_data' Parameter6.1
  2. CVE-2026-97660WPC Product Options for WooCommerce <= 4.0.5 - Unauthenticated Stored Cross-Site Scripting via wpcpo-* Array Key via Multipart Field Name7.2
  3. CVE-2026-103888WPC Smart Quick View for WooCommerce <= 4.4.0 - Reflected Cross-Site Scripting via 'woosq-redirect' Parameter6.1
  4. CVE-2026-95687WPC Shop as a Customer for WooCommerce <= 2.0.0 - Authenticated (Subscriber+) Privilege Escalation via Missing Role Check on Target User to wpcsa_login AJAX Endpoint8.8
  5. CVE-2026-93836WPC Product Bundles for WooCommerce <= 8.6.6 - Unauthenticated Stored Cross-Site Scripting via 'qty' Parameter7.2
  6. CVE-2026-7436WPC Badge Management for WooCommerce <= 3.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'text' Attribute6.4
  7. CVE-2026-49061WordPress WPC Product Options for WooCommerce plugin <= 3.2.1 - Arbitrary File Download vulnerability7.5
  8. CVE-2026-48883WordPress WPC Product Bundles for WooCommerce plugin <= 8.5.3 - Broken Access Control vulnerability7.5
  9. CVE-2025-14767WPC Badge Management for WooCommerce <= 3.1.6 - Authenticated (Shop Manager+) Stored Cross-Site Scripting via 'text' Attribute5.5
  10. CVE-2026-6725WPC Smart Messages for WooCommerce <= 4.2.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attribute6.4
  11. CVE-2026-32406WordPress WPC Product Bundles for WooCommerce plugin <= 8.4.5 - Broken Access Control vulnerability4.3
  12. CVE-2026-32407WordPress WPC Smart Wishlist for WooCommerce plugin <= 5.0.8 - Broken Access Control vulnerability4.3
  13. CVE-2025-60248WordPress WPC Product Options for WooCommerce plugin <= 3.1.3 - Local File Inclusion vulnerability7.5
  14. CVE-2025-12115WPC Name Your Price for WooCommerce <= 2.1.9 - Unauthenticated Price Alteration7.5
  15. CVE-2025-62903WordPress WPC Smart Messages for WooCommerce plugin <= 4.2.8 - Cross Site Scripting (XSS) vulnerability6.5

The record

Peak rank
#169 in Oct 2025
Busiest month shown
Oct 2025, 6 CVEs
Months with a KEV entry
0 since Oct 2025
Monthly snapshots
2 since 2025
Wpclever's full record, month by month