Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Priority LOW 31

The Product Options and Price Calculation Formulas for WooCommerce – Uni CPO (Premium) plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'uni_cpo_remove_file' functi…

CVSS 3.1MEDIUM 5.8 Network No auth No interaction EPSS 0.00224 Published 2026-02-11 No fix listed CWE-862
Priority MEDIUM 43

The Product Options and Price Calculation Formulas for WooCommerce – Uni CPO (Premium) plugin for WordPress is vulnerable to arbitrary file uploads due to misconfigured file type validation in the 'uni_cpo_upload_file' f…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00637 Published 2025-09-23 No fix listed CWE-434