WPC Shop as a Customer for WooCommerce

WPC Shop as a Customer for WooCommerce has 3 disclosed vulnerabilities in the WordSec catalog, reported between 2024 and 2026; all 3 are fixed as of October 2026. Their average CVSS score is 8.6, and the most serious one scores 8.8 out of 10. Severity breakdown: 0 critical and 3 high. 2024 was the busiest year with 2 disclosures.

The most common weakness is Deserialization Of Untrusted Data, behind 1 of the records (33%). Other recurring categories include Improper Privilege Management, Use Of Insufficiently Random Values.

Every one of the 3 issues recorded for WPC Shop as a Customer for WooCommerce has a vendor fix available, so running the current release closes all known holes.

3 independent researchers contributed these findings, one record each.

Strategic Overview

Avg CVSSHigh

8.6/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all WPC Shop as a Customer for WooCommerce vulnerabilities before they are exploited.

Highest severity on recordCVSS 8.8CVE-2026-95687

WPC Shop as a Customer for WooCommerce <= 2.0.0 - Authenticated (Subscriber+) Privilege Escalation via Missing Role Check on Target User to wpcsa_login AJAX Endpoint

Read the full analysis

Vulnerability Records

3 records


2026-09-30 19:45	WPC Shop as a Customer for WooCommerce <= 2.0.0 - Authenticated (Subscriber+) Privilege Escalation via Missing Role Check on Target User to wpcsa_login AJAX Endpoint WPC Shop as a Customer for WooCommerce <= 2.0.0	`CVE-2026-95687`	8.8 High	clever	Yes
2024-12-17 00:00	WPC Shop as a Customer for WooCommerce <= 1.2.8 - Authentication Bypass Due to Insufficiently Unique Key WPC Shop as a Customer for WooCommerce <= 1.2.8	`CVE-2024-12432`	8.1 High	Thanh Nam Tran	Yes
2024-10-24 00:00	WPC Shop as a Customer for WooCommerce <= 1.2.6 - Authenticated (Subscriber+) PHP Object Injection WPC Shop as a Customer for WooCommerce <= 1.2.6	`CVE-2024-50416`	8.8 High	LVT-tholv2k	Yes

Showing 1–3 of 3 reports