→ برگشت به فید آسیب‌پذیری‌ها CVE-2026-97275 · woo-product-builder

آسیب‌پذیری امنیتی در افزونه BuildKit – Product Builder for WooCommerce – Custom PC Builder

The BuildKit – Product Builder for WooCommerce – Custom PC Builder plugin for WordPress is vulnerable to Bypass Vulnerability in all versions up to, and including, 1.0.28. This is due to improper validation of quantity values supplied in user-controlled input. This makes it possible for unauthenticated attackers to manipulate input data, such as product quantities or pricing, when building a custom product configuration. WooCommerce must be active along with the BuildKit plugin.