Neon Channel Product Customizer Free
Neon Channel Product Customizer Free has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it is fixed as of October 2026. Their average CVSS score is 5.3, and the most serious one scores 5.3 out of 10.
The most common weakness is Missing Authorization, behind 1 of the records (100%).
The one issue recorded for Neon Channel Product Customizer Free has a vendor fix available, so running the current release closes it.
All of these findings were reported by theviper17y. Neon Channel Product Customizer Free is installed on roughly 40 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.3.
CVE-2025-54679Neon Channel Product Customizer Free <= 2.0 - Missing Authorization to Unauthenticated Arbitrary Content Deletion
Read the full analysisVulnerability Records

Neon Channel Product Customizer Free
Author
vertim
woocommerceSell custom neon signs online. Neon Channel Product Customizer (NCPC) adds a live neon sign designer to your WooCommerce products. Your customers type their text, choose a font, a colour, a size and a backboard, see their sign glow in real time with its dimensions, and add it to the cart with the right price. You receive the full design with the order. Built for neon sign shops, sign makers, print shops and makers who sell personalised LED neon signs, name signs, wedding and event signs, business logos in neon, bar and café signs. Try it Live demo of the configurator Admin demo Documentation A neon sign designer your customers will enjoy Realistic live preview: glowing LED neon, light on/off switch, day/night view and your own background photos (wall, shop front, bedroom…). Dimensions displayed live: width and height bars on the preview, in centimetres, inches or both. Multi-line text with alignment, character and line limits per size. Word by word styling (optional): a different font or colour for each word. Icons in the text: add your own SVG icons (hearts, stars, logos…) that customers insert next to their words. Three layouts (skins): Default (side panel with tabs), Mono (one continuous page) and Zou (collapsible cards), with your own colours, font and custom CSS. Mobile first: designed for phones and tablets as well as desktops. Clear help: information pop-ups on each section and example images on options. Every text can be edited from one place (Configurator texts), so the configurator speaks your language and your brand voice. Simple setup for you Fixed width or fixed height sizing: define your sign sizes (for example Small 50 cm, Medium 75 cm, Large 100 cm) with their character and line limits. Automatic pricing: base price per line plus price per letter, with an optional number of letters included in the base price, discounts (percentage or fixed) and a minimum price. Fonts: upload your TTF neon fonts or pick Google Fonts. Colours: plain colours, RGB colour-changing and flowing multi-colour effects. Backboards and backboard colours (acrylic board, cut to shape, cut to letter…). Custom options: yes/no, drop-down, image cards, notes or included items, each with its own price (remote control, plug type, waterproofing, gift message…). Design data in the cart and in the order: text, font, colour, size, options and a preview image of the sign. Works with any theme, through a dedicated design page or the [ncpc-configurator productid="123"] shortcode. Translation ready. What the free version includes 1 product type: LED neon signs Fixed width or fixed height sizing, up to 3 sizes Up to 10 fonts and 10 colours (RGB and flowing effects included) Up to 2 backboards and 3 backboard colours Up to 2 custom options 1 pricing table Need more? Upgrade to NCPC Pro NCPC Pro adds: Acrylic, metal and wood channel letters in 2D and 3D, with face, trim, side and back-lit colours Advanced pricing (price by real sign size, square inch/centimetre, length of LED tube) and frame-fit pricing Custom sizes entered by the customer Unlimited sizes, fonts, colours, backboards and options Materials (indoor/outdoor), jackets and mountings with visual previews Request a quote form with file uploads Share and save designs Production files (SVG / DXF) and manufacturer emails Priority support External services This plugin only connects to an external service when you choose a Google Font for a configuration: the font file is then loaded by the visitor’s browser from Google Fonts (fonts.gstatic.com) to display the configurator. Google receives the visitor’s IP address and the requested font file. See the Google Fonts FAQ and Google privacy policy. Fonts you upload yourself are served from your own site.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C