Bopo – WooCommerce Product Bundle Builder <= 1.1.6 - Unauthenticated Sensitive Information Exposure
2026-06-26 00:00
Bao - BlueRockStrategic Overview
StatusPatched in 1.2.0
Affected PluginBopo – WooCommerce Product Bundle Builder
Affected Version
<= 1.1.6CVSS5.3Medium
CVE
CVE-2026-57664Vulnerability Overview
The Bopo – WooCommerce Product Bundle Builder plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.1.6. This makes it possible for unauthenticated attackers to extract sensitive user or configuration data.
Technical Analysis
REMEDIATION: Update to version 1.2.0, or a newer patched version --- IDENTIFIER: CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor) The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
External References
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C