Product Options and Price Calculation Formulas for WooCommerce – Uni CPO (Premium) [uni-woo-custom-product-options-premium] < 4.9.61
unknown
[en] The Product Options and Price Calculation Formulas for WooCommerce – Uni CPO (Premium) plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'uni_cpo_remove_file' function in all versions up to, and including, 4.9.60. This makes it possible for unauthenticated att...
- Affected:
- up to 4.9.61
- Fixed in:
- 4.9.61
- Disclosed:
- Feb 11, 2026
CVE-2025-13391 on NVD →
Product Options and Price Calculation Formulas for WooCommerce – Uni CPO (Premium) <= 4.9.60 - Missing Authorization to Unauthenticated Arbitrary Attachment and Dropbox File Deletion
medium
The Product Options and Price Calculation Formulas for WooCommerce – Uni CPO (Premium) plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'uni_cpo_remove_file' function in all versions up to, and including, 4.9.60. This makes it possible for unauthenticated attacker...
- CVSS:
- 5.8
- Affected:
- up to 4.9.60
- Fixed in:
- 4.9.61
- Disclosed:
- Feb 10, 2026
CVE-2025-13391 on NVD →
Product Options and Price Calculation Formulas for WooCommerce – Uni CPO (Premium) <= 4.9.55 - Unauthenticated Arbitrary File Upload via 'uni_cpo_upload_file'
critical
The Product Options and Price Calculation Formulas for WooCommerce – Uni CPO (Premium) plugin for WordPress is vulnerable to arbitrary file uploads due to misconfigured file type validation in the 'uni_cpo_upload_file' function in all versions up to, and including, 4.9.55. This makes it possible for unauthenticated att...
- CVSS:
- 9.8
- Affected:
- up to 4.9.55
- Fixed in:
- 4.9.56
- Disclosed:
- Sep 22, 2025
CVE-2025-10412 on NVD →
Protect your WordPress site
Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.
Scan your site free
← Back to the vulnerability database