Prodigycommerce vulnerabilities
We track 1 vulnerability in Prodigycommerce products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on February 19, 2026.
1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score
Latest Prodigycommerce vulnerabilities
- 9.8 Critical severity
Prodigy Commerce: Improper Control of Filename for Include/Require Statement in PHP Program
The Prodigy Commerce plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 3.3.0 via the 'parameters[template_name]' parameter. This makes it possible for unauthenticated attackers to include and read arbitrary files