← Back

Bundle Product

bundle_product

Vendor: Webkul • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Webkul
1Bundle Product
Jun 17, 2026
Jan 23, 2024
N/A· v4
9.8 CRITICAL· v3
N/A· v2
SQL injection vulnerability in Webkul Bundle Product 6.0.1 allows a remote attacker to execute arbitrary code via the id_product parameters in the UpdateProductQuantity function.