{"cvss":0.0,"datePublished":"","dateUpdated":"","description":"WPC Product Bundles for WooCommerce <= 8.6.6 - Unauthenticated Stored Cross-Site Scripting via 'qty' Parameter | Affected: Wpclever / WPC Product Bundles for WooCommerce | CVSS: 7.2 (HIGH) | EPSS: 0.00243 | Used in malware: unknown | Not yet in CISA KEV: True","dueDate":"","exploited":true,"id":"CVE-2026-93836","kev_catalogs":["circl"],"knownRansomwareCampaignUse":"","product":"WPC Product Bundles for WooCommerce","severity":"HIGH","source":"circl_kev","title":"CVE-2026-93836","vendor":""}