CVE-2026-48883 Unauthenticated Broken Access Control in WPC Product Bundles for WooCommerce <= 8.5.3 versions

Description

Unauthenticated Broken Access Control in WPC Product Bundles for WooCommerce <= 8.5.3 versions.

Affected products and versions

Product	Affected versions	Fixed in
WPC Product Bundles for WooCommerce 8.5	earliest → 8.5.3	No fix stated

Other CVEs of WPC Product Bundles for WooCommerce

The 4 CVEs of WPC Product Bundles for WooCommerce →

CVE-2026-93836 The WPC Product Bundles for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the… 7.2 High CVE-2026-32406 Missing Authorization vulnerability in WPClever WPC Product Bundles for WooCommerce woo-product-bundle allows Exploiting… 4.3 Medium CVE-2023-52127 Cross-Site Request Forgery (CSRF) vulnerability in WPClever WPC Product Bundles for WooCommerce.This issue affects WPC… 4.3 Medium