CVE-2026-49061 Unauthenticated Arbitrary File Download in WPC Product Options for WooCommerce <= 3.2.1 versions

Description

Unauthenticated Arbitrary File Download in WPC Product Options for WooCommerce <= 3.2.1 versions.

Affected products and versions

Product	Affected versions	Fixed in
WPC Product Options for WooCommerce 3.2	earliest → 3.2.1	No fix stated

Other CVEs of WPC Product Options for WooCommerce

The 3 CVEs of WPC Product Options for WooCommerce →

CVE-2026-97660 The WPC Product Options for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via wpcpo-*… 7.2 High CVE-2025-60248 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in… 7.5 High