WPC Admin Columns

WPC Admin Columns has 2 disclosed vulnerabilities in the WordSec catalog, reported between 2025 and 2026; all 2 are fixed as of September 2026. Their average CVSS score is 6.6, and the most serious one scores 8.8 out of 10. Severity breakdown: 0 critical and 1 high.

The most common weakness is Exposure Of Sensitive Information To An Unauthorized Actor, behind 1 of the records (50%). Other recurring categories include Improper Privilege Management.

Every one of the 2 issues recorded for WPC Admin Columns has a vendor fix available, so running the current release closes all known holes.

2 independent researchers contributed these findings, one record each. WPC Admin Columns is installed on roughly 1,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.4.

Strategic Overview

Avg CVSSMedium
6.6/ 10
Patch Coverage100%
Open

0

Fixed

2

Get automatic notifications for all WPC Admin Columns vulnerabilities before they are exploited.

Highest severity on recordCVSS 8.8CVE-2025-3418

WPC Admin Columns 2.0.6 - 2.1.0 - Authenticated (Subscriber+) Privilege Escalation via User Meta Update

Read the full analysis

Vulnerability Records

2 records
WPC Admin Columns banner
Latestv2.3.4

WPC Admin Columns

WPClever

Author

WPClever

5.0(4)
100/100
Last Updated
2026-08-04 (1mo ago)
Active Installs
1,000+
Downloads
30,480
Requires WP
5.9+
Requires PHP
0+
Tested up to
WP 7.0.4
Created
2023-12-08 (3y ago)

Managing an online store on WordPress is made easier with the WPC Admin Columns plugin. This plugin offers a listing of columns in the admin dashboards for different post-types, so you can adjust the columns’ width, quickly find the ones to be edited, and preview the details at a glance. A variety of data and parameters will be displayed for faster preview of different post-types – products, posts, pages, and especially, orders. For example, instead of choosing a filter to find a specific product type, now users can see which type each product belongs to with the “Product type” column. It’s super helpful to detect special product types, namely Smart Bundles/ Smart Composite & Smart Grouped. The most remarkable feature in this plugin is the custom columns for products and orders. In the content of these custom columns, it’s possible to insert texts and shortcode. There’s also a Remove button for each custom column to be left out of the column list effortlessly. With this, shop owners and administrators can literally display any piece of information they want in the backend dashboard. Key features Easily turn on/off the columns with 1 button Drag and drop to rearrange the columns Customize the width of columns Add unlimited new columns to the list Support multiple post-types: posts, products, pages, etc. Support multiple taxonomies: category, tag, collection, brand, product category, product attribute, etc. Support comments, attachment, plugins Plenty of predefined columns of data Posts/pages: post properties, post ID, excerpt & name Products: metadata, product ID, type, name, status, etc. Orders: order ID, status, billing, payment, notes, etc. Custom column: editable, removable content with text & shortcode Reset all custom column settings to the original in 1 click Work well with many WPC plugins & all WPC themes Work well with common WordPress themes and plugins Default Columns WordPress allows users to check/uncheck the columns they want to display or hide from the Screen Options menu. However, it’s time-consuming when you need to modify more data at the same time and very annoying to open that menu several times. WPC Admin Columns helps you go further by listing all columns in one popup so they can grab the information in an instance. Default columns will be listed on top of each list: Products: Image, Name, SKU, Stock, Price, Categories, Tags, Featured, Date Orders: Order, Date, Status, Billing, Ship To, Total, Actions, the Latest Note, Note Pages: Title, Author, Comments, Date Posts: Title, Author, Categories, Tags, Comments, Date Management of Products & Orders By default, WooCommerce only shows some of the product details in the Products dashboard. Our plugin makes it more straightforward for shop owners and administrators to preview products’ type, status, description, short description, weight, length, width, height, dimensions besides basic information, namely product ID & name. For orders, users are entitled to not just preview basic information such as Order, Date, Status, Billing, Ship To, Total, Actions, Latest Note, Note. There is an individual column exclusive for notes created by the WPC Order Notes for WooCommerce plugin. Clicking on the icon under the Notes column, then the popup will be opened for users to preview all existing notes and add a new one if they want. Work in the WPClever Ecosystem Being a new member in the plugin collection of WPClever means there are huge possibilities that many features of other WPC plugins are integrated and ready to use for users. It also means this plugin is fully tested on any of our WPC themes, so users can expect smooth performance if they use any of our themes for the online store. For products, there are ready-made columns for: Pricing plugins: WPC Price by Quantity & WPC Price by User Role Product management: WPC Smart Product Collections & WPC Brands Wishlist management: WPC Smart Wishlist Timers: WPC Product Timer & WPC Countdown Timer Under these columns, users can click on the icon to access the Quick Edit popup and preview the settings. Saving time in managing your products & orders should be the very first step to higher success. Need more features? Please try other plugins from us: WPC Variation Bulk Editor WPC Variation Duplicator WPC Backend Product Filter WPC Smart Linked Products WPC Custom Related Products

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C