CVE-2026-97275: WordPress BuildKit – Product Builder for WooCommerce – Custom PC Builder plugin <= 1.0.28 - Bypass Vulnerability vulnerability
Improper Validation of Specified Quantity in Input vulnerability in VillaTheme BuildKit – Product Builder for WooCommerce – Custom PC Builder woo-product-builder allows Input Data Manipulation.This issue affects BuildKit – Product Builder for WooCommerce – Custom PC Builder: from n/a through 1.0.28.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
VillaTheme BuildKit – Product Builder for WooCommerce – Custom PC Builderto a version that resolves this vulnerability.Fixed in 1.0.29
Event History
Frequently Asked Questions
Who can exploit this issue?
The vulnerability is remotely exploitable and requires no authentication or user interaction. An attacker able to send requests to a site using an affected plugin version could manipulate specified quantity input data.
Which installations are affected?
BuildKit – Product Builder for WooCommerce – Custom PC Builder versions through 1.0.28 are affected. The available information does not state whether any particular configuration or feature setup is required.
What is the known impact?
The stated impact is integrity-related: an attacker may bypass validation of specified quantities and manipulate input data. No confidentiality or availability impact is identified in the provided severity vector.