Skip to content
Threat Feed
Subscribe

Product

3D Product Configurator for WooCommerce (<= 2.16.2)

1 brief RSS
critical advisory

Unauthenticated Remote Code Execution in 3D Product Configurator for WooCommerce

The 3D Product configurator for WooCommerce plugin for WordPress is vulnerable to unauthenticated remote code execution via the xpv_image parameter in versions up to 2.16.2.

3D Product configurator for WooCommerce
1r 2t 1c