Printcart vulnerabilities
We track 7 vulnerabilities in Printcart products across 2 products. 7 are rated high or critical, and none are known to be exploited. The most recent was published on November 7, 2026.
Latest Printcart vulnerabilities
- 9.8 Critical severity
Printcart Store – Web to Print Product…: Improper Control of Generation of Code
The Printcart Store – Web to Print Product Designer for WooCommerce plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 2.13.2. This is due to the `nbu_crop_image` AJAX handler accepting a user-supplied `url` param
- 9.8 Critical severity
Printcart Store – Web to Print Product…: Unrestricted Upload of File with Dangerous Type
The Printcart Store (PCDesigner / NB Designer) plugin for WooCommerce is vulnerable to unauthenticated arbitrary file upload leading to remote code execution in all versions up to, and including, 2.9.1 The nbdesigner_copy_image_from_url AJAX action is register
- 7.5 High severity
Printcart Store – Web to Print Product…: Improper Limitation of a Pathname to a Restricted Directory
The Printcart Web to Print Product Designer for WooCommerce plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 2.8.5 via the 'mockups' parameter. This makes it possible for unauthenticated attackers to read the cont
- 9.1 Critical severity
Printcart Web to Print Product Designer for…: Improper Limitation of a Pathname to a Restricted Directory
The Printcart Web to Print Product Designer for WooCommerce plugin for WordPress is vulnerable to Arbitrary File Deletion in versions up to, and including, 2.5.2 This is due to insufficient path validation in the store_design_data() function, which constructs
- 8.5 High severity
Printcart Web to Print Product Designer for…: Improper Neutralization of Special Elements used in an SQL Command
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in printcart Printcart Web to Print Product Designer for WooCommerce printcart-integration allows SQL Injection.This issue affects Printcart Web to Print Product
- 10.0 Critical severity
Printcart Web to Print Product Designer for…: Unrestricted Upload of File with Dangerous Type
Unrestricted Upload of File with Dangerous Type vulnerability in printcart Printcart Web to Print Product Designer for WooCommerce printcart-integration allows Upload a Web Shell to a Web Server.This issue affects Printcart Web to Print Product Designer for Wo
- 9.3 Critical severity
Printcart Web to Print Product Designer for…: Improper Neutralization of Special Elements used in an SQL Command
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in printcart Printcart Web to Print Product Designer for WooCommerce printcart-integration allows SQL Injection.This issue affects Printcart Web to Print Product