CVE-2026-97275

VillaTheme BuildKit – Product Builder for WooCommerce – Custom PC Builder

Published 5 Oct 2026 · updated 5 Oct 2026 · Received

5.3 Medium · CVSS 3.1, patchstack.com

Description

Improper Validation of Specified Quantity in Input vulnerability in VillaTheme BuildKit – Product Builder for WooCommerce – Custom PC Builder woo-product-builder allows Input Data Manipulation.This issue affects BuildKit – Product Builder for WooCommerce – Custom PC Builder: from n/a through 1.0.28.

References

patchstack.com/database/wordpress/plugin/woo-product-builder/vulnerability/wordpress-buildkit-product-builder-for-woocommerce-custom-pc-builder-plugin-1-0-28-bypass-vulnerability-vulnerability?_s_id=cve