CVE-2026-105872: Mklacroix Product Configurator For Woocommerce

High severity, CVSS 7.2. EPSS: 0.3% chance of exploitation in the next 30 days.

Deserialization of Untrusted Data vulnerability in mklacroix Product Configurator for WooCommerce product-configurator-for-woocommerce allows Object Injection.This issue affects Product Configurator for WooCommerce: from n/a through 1.7.5.

Affected products

• Mklacroix Product Configurator For Woocommerce: up to and including 1.7.5

Published 2026-10-09. Last modified 2026-10-09.