CVE-2026-93836 | wpclever WPC Product Bundles for WooCommerce Plugin up to 8.6.6 on WordPress qty cross site scripting

September 22, 2026 Yanac

A vulnerability described as problematic has been identified in wpclever WPC Product Bundles for WooCommerce Plugin up to 8.6.6 on WordPress. This vulnerability affects unknown code. The manipulation of the argument qty results in cross site scripting.

This vulnerability was named CVE-2026-93836. The attack may be performed from remote. There is no available exploit.VulDB Recent EntriesRead More