CVE-2026-97660 | WPClever WPC Product Options Plugin up to 4.0.5 on WordPress Guest Checkout wpcpo-* cross site scripting

October 3, 2026 Yanac

A vulnerability categorized as problematic has been discovered in WPClever WPC Product Options Plugin up to 4.0.5 on WordPress. This affects an unknown part of the component Guest Checkout. The manipulation of the argument wpcpo-* results in cross site scripting.

This vulnerability is identified as CVE-2026-97660. The attack can be executed remotely. There is not any exploit available.VulDB Recent EntriesRead More