Automated Import Products To Cart
Monthly
Automated Import Products to Cart before 1.0.4 allows authenticated users with only subscriber-level permissions to read arbitrary server files, including files holding database credentials, and to delete arbitrary files. The plugin passes an unsanitized user-supplied file path into file read and delete operations (CWE-22 path traversal), giving a low-privileged account high confidentiality and integrity impact with no victim interaction; CVSS 9.9 and the vuln.today act_now label reflect a genuine high-priority issue. A public PoC reference exists but is not verified as working exploit code, and CISA SSVC records no known exploitation.
Automated Import Products to Cart before 1.0.4 allows authenticated users with only subscriber-level permissions to read arbitrary server files, including files holding database credentials, and to delete arbitrary files. The plugin passes an unsanitized user-supplied file path into file read and delete operations (CWE-22 path traversal), giving a low-privileged account high confidentiality and integrity impact with no victim interaction; CVSS 9.9 and the vuln.today act_now label reflect a genuine high-priority issue. A public PoC reference exists but is not verified as working exploit code, and CISA SSVC records no known exploitation.