Back to Database
Status published
Medium
CVE-2024-43312
WordPress WPC Frequently Bought Together for WooCommerce plugin <= 7.1.9 - Broken Access Control vulnerability
Vulnerability Description
Missing Authorization vulnerability in WPClever WPC Frequently Bought Together for WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WPC Frequently Bought Together for WooCommerce: from n/a through 7.1.9.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-43312
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- Trương Hữu Phúc (truonghuuphuc) (Patchstack Alliance)
More from WPClever
View All →CVE-2025-62903
WordPress WPC Smart Messages for WooCommerce plugin <= 4.2.8 - Cross Site Scripting (XSS) vulnerability
Medium
6.5
CVE-2025-60248
WordPress WPC Product Options for WooCommerce plugin <= 3.1.3 - Local File Inclusion vulnerability
High
7.5
CVE-2025-49908
WordPress WPC Countdown Timer for WooCommerce plugin <= 3.1.4 - Cross Site Scripting (XSS) vulnerability
Medium
6.5
CVE-2025-30825
WordPress WPC Smart Linked Products plugin <= 1.3.5 - Privilege Escalation vulnerability
High
8.8
CVE-2025-30772
WordPress WPC Smart Upsell Funnel for WooCommerce plugin <= 3.0.4 - Arbitrary Option Update to Privilege Escalation vulnerability
High
8.8
Affected Vendor
WPClever
View all reports →Affected Software
WPC Frequently Bought Together for WooCommerce
Vulnerable Versions:
Unknown
Timeline
Official Publish:
November 1st, 2024
Last Modified:
April 28th, 2026
Added to House:
July 22nd, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N