Is CVE-2026-105872 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-105872?

CVE-2026-105872 has a CVSS v3 severity of HIGH (7.2).

Back

CVE-2026-105872

Description

Deserialization of Untrusted Data vulnerability in mklacroix Product Configurator for WooCommerce product-configurator-for-woocommerce allows Object Injection.This issue affects Product Configurator for WooCommerce: from n/a through 1.7.5.