2 matches found
EUVD-2026-96055
The 3D Product configurator for WooCommerce plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 2.16.2 via the 'xpvimage' parameter parameter. This is due to missing authentication and nonce checks on the wploaded handler combined with no sanitization...
9.8CVSS6.3AI score0.00742EPSS
SaveExploits0References8
20