Beveiligingsadvies

CVE-2025-10162

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-10-07 06:00:04

Laatst bijgewerkt 2025-10-07 14:14:40

Toegewezen door WPScan

CVSS-score 7.5

Status PUBLISHED

Beschrijving

The Admin and Customer Messages After Order for WooCommerce: OrderConvo WordPress plugin before 14 does not validate the path of files to be downloaded, which could allow unauthenticated attacker to read/download arbitrary files via a path traversal attack

← Alle CVE's bekijken Bekijk op cve.org ↗