Vulnerabilities / STAGGS
STAGGS vulnerabilities
Advisories WPSec published for STAGGS – Product Configurator Toolkit. Other sources may list more. Its attack surface: STAGGS on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-11-05 | WPSEC-2026-2576 | STAGGS <= 3.3.0 - Unauthenticated Remote Code Execution via Configurator Price Calculation | High 8.1 | 3.4.0 |
| 2026-11-05 | WPSEC-2026-2575 | STAGGS <= 3.3.0 - Unauthenticated Arbitrary File Deletion via Product Image URL | Critical 9.1 | 3.4.0 |
License: CC BY 4.0