CVE-2026-57664

Unauthenticated Sensitive Data Exposure in Bopo – WooCommerce Product Bundle Builder <= 1.1.6 versions.

Credits

Bao - BlueRock | Patchstack Bug Bounty Program

References

https://patchstack.com/database/wordpress/plugin/bopo-woo-product-bundle-builder/vulnerability/wordpress-bopo-woocommerce-product-bundle-builder-plugin-1-1-6-sensitive-data-exposure-vulnerability?_s_id=cve