WPC Product Options for WooCommerce
WPC Product Options for WooCommerce has 2 disclosed vulnerabilities in the WordSec catalog, reported between 2025 and 2026; all 2 are fixed as of September 2026. Their average CVSS score is 7.5, and the most serious one scores 7.5 out of 10. Severity breakdown: 0 critical and 2 high.
The most common weakness is Path Traversal, behind 1 of the records (50%). Other recurring categories include PHP Remote File Inclusion.
Every one of the 2 issues recorded for WPC Product Options for WooCommerce has a vendor fix available, so running the current release closes all known holes.
2 independent researchers contributed these findings, one record each. WPC Product Options for WooCommerce is installed on roughly 4,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.
CVE-2026-49061WPC Product Options for WooCommerce <= 3.2.1 - Unauthenticated Arbitrary File Download
Read the full analysisVulnerability Records

WPC Product Options for WooCommerce
Author
WPClever
woocommerceWPC Product Options for WooCommerce will become another essential plugin for any kind of online stores, which brings about the power of adjusting prices with highly customizable additional fields for simple products. Users can insert up to 18+ different types of custom add-ons to simple products so that customers can easily configure their preferences. Online stores that emphasize personalization & customized designs, take in on-demand orders, and have sophisticated products with complex configurations will benefit from this plugin the most. Three modes are available: Global, Override, and Disable. Users can configure as many premade fields as they want and use them as global add-ons to insert to multiple products at a time using product types, categories, tags, brands, attributes, etc. In Override, custom add-ons for individual products can be specified easily in the same way as Global add-ons. Especially, users can use the Shortcode field to insert anything they want using short-code, for example, a Countdown Timer for flash sale counting or size chart. Another special thing about WPC Product Options for WooCommerce is that users can define a new custom price formula that suits their products well. There are some special goods and services requiring special pricing for add-ons, and this is available right in our plugin. Live demo Visit our live demo here to see how this plugin works. Key Features 23+ type of custom add-ons and fields: text, date & time, file upload, etc. Global add-ons for product types, categories, tags, brands, attributes, etc. Customize individual product add-ons or disable global add-ons completely Add-on pricing: Flat fee (amount or %), quantity synced & custom formula Nice picker for date, time, date & time, data range and colors Drag and drop builder – easy to move the add-on fields around Shortcode supported for inserting anything, i.e. countdown clock, size chart Highly configurable fields: title, required, description, price, default value, limits Compatible with most common WordPress themes and WooCommerce plugins Field Types Text Textarea Email Number File Upload Radio (single selection) Image Radio (single selection) Color Radio (single selection) Checkbox (multiple selection) Image Checkbox (multiple selection) Color Checkbox (multiple selection) Dimensions (multiple dimensions, e.g., width, height, length, etc.) Select (single selection) Color Picker Date Picker Date Time Picker Date Range Picker Timer Picker Heading Paragraph Separator Spacer Shortcode Additional Prices There are three types of prices for add-ons: flat fee, quantity synced, and custom formula. Flat fee: Users can use a number to set a fixed price for each field or enter a percentage, for example, 10% – the additional price will be 10% of the main price. Quantity synced: When customers increase or decrease the quantity of the main product, the Quantity synced price means the unit price, so it will be multiplied by the chosen value of the main quantity. Custom formula (Premium Version): Users can define their own price formula. Use p for price, q for quantity, v for value, and l for length. Need more features? Please try other plugins from us: WPC Product Timer for WooCommerce WPC Product Quantity for WooCommerce WPC Price by User Role for WooCommerce WPC Price by Quantity for WooCommerce WPC AJAX Add to Cart for WooCommerce
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C