Live › vulnerability › CVE-2026-110377
Go to dashboardThe Bopo WooCommerce Product Bundle Builder WordPress plugin, up to and including version 1.2.3, is missing an authorization check on some functionality. The sources do not say which action an attacker could take with it.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-26 10:29 UTC. All times on this page are UTC.
Sites running the Bopo – WooCommerce Product Bundle Builder plugin at version 1.2.3 or earlier are affected. The sources do not say which roles or endpoints are exposed, so the exact exposure is unknown. Sites without this plugin installed can skip it.
No product ranges from the sources yet.
bopo-woo-product-bundle-builder) in the WordPress admin under Plugins.1.2.3; the sources do not name the fixed version.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Missing Authorization vulnerability in VillaTheme Bopo – WooCommerce Product Bundle Builder bopo-woo-product-bundle-builder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Bopo – WooCommerce Product Bundle Builder: from n/a through 1.2.3.
This page as .md · .json · in your agent: get_signal("CVE-2026-110377")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.