WordPress plugin
Pure WC Variation Swatches security & vulnerabilities
Unpatched vulnerability in the latest version
At least one vulnerability affects the latest version and no fix has been released. Deactivate the plugin or restrict access to the affected feature until the vendor ships a patch.
- Critical0
- High0
- Medium1
- Low0
All Pure WC Variation Swatches vulnerabilities
Nothing in this view
No vulnerabilities match this filter. Show all.
Pure WC Variation Swatches: common questions
Does Pure WC Variation Swatches have known vulnerabilities?
Yes. VulnCrest Radar lists 1 known vulnerability in Pure WC Variation Swatches: 1 medium. At least one is not fixed in the latest version.
How do I check which version of Pure WC Variation Swatches I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Pure WC Variation Swatches vulnerability?
CVE-2025-12820, published Nov 28, 2025: Pure WC Variation Swatches <= 1.1.7 - Missing Authorization to Unauthenticated Settings Update. Severity: Medium (CVSS 5.3).
Is any Pure WC Variation Swatches vulnerability listed in CISA KEV?
No. None of the known Pure WC Variation Swatches vulnerabilities is currently listed in the CISA KEV catalog.