Skip to content
Sign in
7.5 High

CVE-2025-60248 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in…

Description

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in WPClever WPC Product Options for WooCommerce wpc-product-options allows PHP Local File Inclusion.This issue affects WPC Product Options for WooCommerce: from n/a through <= 3.1.3.

Affected products and versions

Product Affected versions Fixed in
WPC Product Options for WooCommerce 3.1 earliest → 3.1.3 No fix stated

Other CVEs of WPC Product Options for WooCommerce

The 3 CVEs of WPC Product Options for WooCommerce →
CVE-2026-97660 The WPC Product Options for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via wpcpo-*… 7.2 High CVE-2026-49061 Unauthenticated Arbitrary File Download in WPC Product Options for WooCommerce <= 3.2.1 versions 7.5 High
Track this CVE