Automated Import Products to Cart vulnerabilities
We track 1 vulnerability in Automated Import Products to Cart products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on October 29, 2026.
1vulnerabilities
1critical
0high
0exploited
9.9average CVSS score
Latest Automated Import Products to Cart vulnerabilities
- 9.9 Critical severity
Automated Import Products to Cart: Improper Limitation of a Pathname to a Restricted Directory
The Automated Import Products to Cart WordPress plugin before 1.0.4 does not sanitize a user-supplied file path before using it to read and delete files, allowing users with minimal permissions, such as subscribers, to read arbitrary files (including ones cont