WordPress plugin
WPC Shop as a Customer for WooCommerce security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 3 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical0
- High3
- Medium0
- Low0
All WPC Shop as a Customer for WooCommerce vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| High8.8 | Authenticated (Subscriber+) Privilege Escalation via Missing Role Check on Target User to wpcsa_login AJAX Endpoint ≤2.0.0Update to 2.0.1 | CVE-2026-95687 | |
| High8.1 | Authentication Bypass Due to Insufficiently Unique Key ≤1.2.8Update to 1.2.9 | CVE-2024-12432 | |
| High8.8 | Authenticated (Subscriber+) PHP Object Injection ≤1.2.6Update to 1.2.7 | CVE-2024-50416 |
- High8.8Authenticated (Subscriber+) Privilege Escalation via Missing Role Check on Target User to wpcsa_login AJAX Endpoint
≤2.0.0Update to 2.0.1
- High8.1Authentication Bypass Due to Insufficiently Unique Key
≤1.2.8Update to 1.2.9
- High8.8Authenticated (Subscriber+) PHP Object Injection
≤1.2.6Update to 1.2.7
WPC Shop as a Customer for WooCommerce: common questions
Does WPC Shop as a Customer for WooCommerce have known vulnerabilities?
Yes. VulnCrest Radar lists 3 known vulnerabilities in WPC Shop as a Customer for WooCommerce: 3 high. None are known to affect version null.
How do I check which version of WPC Shop as a Customer for WooCommerce I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent WPC Shop as a Customer for WooCommerce vulnerability?
CVE-2026-95687, published Sep 30, 2026: WPC Shop as a Customer for WooCommerce <= 2.0.0 - Authenticated (Subscriber+) Privilege Escalation via Missing Role Check on Target User to wpcsa_login AJAX Endpoint. Severity: High (CVSS 8.8).
Is any WPC Shop as a Customer for WooCommerce vulnerability listed in CISA KEV?
No. None of the known WPC Shop as a Customer for WooCommerce vulnerabilities is currently listed in the CISA KEV catalog.