WPC Composite Products for WooCommerce

WPC Composite Products for WooCommerce has one disclosed vulnerability in the WordSec catalog, all reported in 2024; it is fixed as of September 2026. Their average CVSS score is 6.4, and the most serious one scores 6.4 out of 10.

The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).

The one issue recorded for WPC Composite Products for WooCommerce has a vendor fix available, so running the current release closes it.

All of these findings were reported by Krzysztof Zając. WPC Composite Products for WooCommerce is installed on roughly 9,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.

Strategic Overview

Avg CVSSMedium
6.4/ 10
Patch Coverage100%
Open

0

Fixed

1

Get automatic notifications for all WPC Composite Products for WooCommerce vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.4CVE-2024-2838

WPC Composite Products for WooCommerce <= 7.2.7 - Authenticated (Subscriber+) Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

1 records
WPC Composite Products for WooCommerce banner
Latestv8.0.2

WPC Composite Products for WooCommerce

WPClever

Author

WPClever

4.6(76)
92/100
Last Updated
2026-08-26 (18d ago)
Active Installs
9,000+
Downloads
653,374
Requires WP
5.9+
Requires PHP
0+
Tested up to
WP 7.1
Created
2019-03-29 (8y ago)
Requires Plugins
woocommerce

WPC Composite Products for WooCommerce is a quintessential plugin for every online shop out there that based their business on WooCommerce platform. This powerful tool can make your sales skyrocket and increase your business’s online visibility. By creating a comprehensive deal of various products, this plugin acts as a kit-builder which allows cross-selling of various product types. Customers can build a whole computer from a list of variable parts or get an amazing deal of awesome components. Indeed, a tool that should not be missed for any online store. Live demo Visit our live demo here to see how this plugin works. Basics to create a composite product Features AJAX responsive search using keywords Drag & drop to rearrange the order of components Add a short description for each component Set the discount price by percentage Set the default product for each component Set the default quantity for each component product Mark a component product as required or optional Allow customizing the quantity of each component Set the min/max quantity for each component Configure total limits: required min/max amount of the composite total (NEW) Customizable text for null selection option Adjustable Before/ After texts Auto-calculate the price based on changes in quantity Component products are inventory-managed just like standalone sales Premium Version Use Step-by-step and Accordion layout for components Use Categories, Tags, or Attributes as the source for component options Not what you needed? Please try other plugins from us: WPC Product Bundles WPC Frequently Bought Together WPC Grouped Product WPC Force Sells WPC Linked Variation

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C