What is the CVSS score of CVE-2025-15662?

CVE-2025-15662 has a CVSS 3.1 base score of 8.6 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N. EPSS exploitation probability: 0.3%.

Is there a public PoC exploit available for CVE-2025-15662?

Yes, a public proof-of-concept exploit is available for CVE-2025-15662. Prioritise patching immediately. EPSS: 0.3%.

Is there a patch available for CVE-2025-15662?

Yes, a patch is available for CVE-2025-15662. Update the affected software to the latest version immediately.

Printcart Web To Print Product Designer For Woocommerce CVE-2025-15662

EUVD-2025-210510 HIGH

Server-Side Request Forgery (SSRF) (CWE-918)

2026-07-27 WPScan

GHSA-mr8j-8vxg-4j85

SSRF WordPress Printcart Web To Print Product Designer For Woocommerce

8.6

CVSS 3.1 · Vendor: WPScan

Severity by source

Vendor (WPScan) PRIMARY

8.6 HIGH

AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

Primary rating from Vendor (WPScan) · only source for this CVE.

CVSS VectorVendor: WPScan

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Changed

Confidentiality

High

Integrity

None

Availability

None

Lifecycle Timeline

Analysis Generated

Jul 27, 2026 - 16:25 vuln.today

CVSS changed

Jul 27, 2026 - 16:22 NVD

8.6 (HIGH)

Patch available

Jul 27, 2026 - 07:01 EUVD

CVE Published

Jul 27, 2026 - 06:00 cve.org

HIGH 8.6

CVE Published

Jul 27, 2026 - 06:00 cve.org

UNKNOWN (no severity yet)

DescriptionCVE.org

The Printcart Web to Print Product Designer for WooCommerce WordPress plugin before 2.5.3 does not restrict a user-supplied URL before fetching it server-side and does not enforce a valid authorization check, allowing unauthenticated attackers to read arbitrary local files (including configuration files containing database credentials and secret keys) and to make server-side requests to internal resources.

AnalysisAI

Unauthenticated server-side request forgery (SSRF) and arbitrary local file read in Printcart Designer for WooCommerce versions prior to 2.5.3 allows attackers to exfiltrate sensitive configuration files and probe internal network resources. Public exploit code is available, and the patch has been released by the vendor.