Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: mklacroix Clear all filters
TI-2026-69997 CVE-2026-105872 · GHSA-7mrq-mrvf-rm6g

PHP object injection in Product Configurator for WooCommerce plugin

Priority LOW 33

Deserialization of Untrusted Data vulnerability in mklacroix Product Configurator for WooCommerce product-configurator-for-woocommerce allows Object Injection.This issue affects Product Configurator for WooCommerce: from…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00291 Published 2026-10-09 No fix listed CWE-502
TI-2025-34437 CVE-2025-54674 · GHSA-fpvv-xmjr-h8hp

WordPress Product Configurator for WooCommerce Plugin plugin <= 1.4.4 - Cross Site Request Forgery (CSRF) Vulnerability

Priority LOW 24

Cross-Site Request Forgery (CSRF) vulnerability in mklacroix Product Configurator for WooCommerce product-configurator-for-woocommerce allows Cross Site Request Forgery.This issue affects Product Configurator for WooComm…

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.00158 Published 2025-08-14 No fix listed CWE-352