Order Tip for WooCommerce vulnerabilities
We track 1 vulnerability in Order Tip for WooCommerce products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on August 26, 2026.
1vulnerabilities
0critical
1high
0exploited
8.7average CVSS score
Latest Order Tip for WooCommerce vulnerabilities
- 8.7 High severity
Order Tip for WooCommerce: External Control of File Name or Path
The Order Tip for WooCommerce WordPress plugin before 1.6.0 does not check the capability of the user requesting a file deletion, nor does it restrict which path may be deleted, allowing users with the Shop Manager role and above to delete arbitrary files on t