Vulnerabilities and security researches forproduct-configurator-for-woocommerce product-configurator-for-woocommerce

Jun 07, 2024

CVE, Research URL: CVE-2022-1953
Home page URL: Security reports for Product Configurator for WooCommerce
Application: Product Configurator for WooCommerce
Date: Jun 27, 2022
Research Description: The Product Configurator for WooCommerce WordPress plugin before 1.2.32 suffers from an arbitrary file deletion vulnerability via an AJAX action, accessible to unauthenticated users, which accepts user input that is being used in a path and passed to unlink() without validation first
Affected versions: Min -, max -.
Status: vulnerable

Aug 01, 2025

CVE, Research URL: CVE-2025-54674
Home page URL: Security reports for Product Configurator for WooCommerce
Application: Product Configurator for WooCommerce
Date: -
Research Description: Product Configurator for WooCommerce [product-configurator-for-woocommerce] < 1.5.0 CVE-2025-54674
Affected versions: Min -, max -.
Status: vulnerable