CVE-2026-97275

5.3 MEDIUM

Published 2026-10-05 · Updated 2026-10-06

AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.

NVD description

Improper Validation of Specified Quantity in Input vulnerability in VillaTheme BuildKit – Product Builder for WooCommerce – Custom PC Builder woo-product-builder allows Input Data Manipulation.This issue affects BuildKit – Product Builder for WooCommerce – Custom PC Builder: from n/a through 1.0.28.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Weaknesses

CWE-1284

All references

https://patchstack.com/database/wordpress/plugin/woo-product-builder/vulnerability/wordpress-buildkit-product-builder-for-woocommerce-custom-pc-builder-plugin-1-0-28-bypass-vulnerability-vulnerability?_s_id=cve

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

MEDIUMCVE-2025-36178
MEDIUMCVE-2026-101985
MEDIUMCVE-2026-101995
HIGHCVE-2026-102016
MEDIUMCVE-2026-102019
MEDIUMCVE-2026-102033
HIGHCVE-2026-102065
MEDIUMCVE-2026-102067

Related by shared AI tags and CWE weakness class. Browse the full archive.