File Upload to Order vulnerabilities
We track 1 vulnerability in File Upload to Order products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on October 14, 2026.
1vulnerabilities
1critical
0high
0exploited
10.0average CVSS score
Latest File Upload to Order vulnerabilities
- 10.0 Critical severity
File Upload to Order: External Control of File Name or Path
The File Upload to Order WordPress plugin before 1.1.4 does not validate or confine a file path taken from attacker-controlled session data before deleting the file, and the action that performs the deletion is reachable by unauthenticated users, allowing them