CVE-2026-93836: Stored XSS vulnerability in WPC Product Bundles for WooCommerce

The WPC Product Bundles for WooCommerce WordPress plugin is vulnerable to stored cross-site scripting (XSS) in all versions up to and including 8.6.6.