PT-2026-109482

Name of the Vulnerable Software and Affected Versions 3D Product configurator for WooCommerce versions prior to 2.16.3 Description Remote Code Execution is possible due to missing authentication and nonce checks on the wp loaded handler. The issue occurs because the xpv image POST parameter is no...