A vulnerability labeled as critical has been found in Product Options and Price Calculation Formulas for WooCommerce Plugin up to 4.9.60 on WordPress. This affects the function
uni_cpo_remove_file. Such manipulation leads to missing authorization.
This vulnerability is documented as CVE-2025-13391. The attack can be executed remotely. There is not any exploit available.
