Security Advisory

CVE-2026-15056

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-08-16 05:27:29

Last updated 2026-08-17 16:05:27

Assigner Wordfence

CVSS score 6.5

State PUBLISHED

Description

The StoreEngine — Complete eCommerce Solution with Memberships, Licensing, Affiliates & More plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 2.1.1 via the parse_file_path function. This makes it possible for authenticated attackers, with vendor-level access and above, to read the contents of arbitrary files on the server, which can contain sensitive information.

← Browse all CVEs View on cve.org ↗