Snowray vulnerabilities
We track 1 vulnerability in Snowray products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on December 20, 2025.
1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score
Latest Snowray vulnerabilities
- 9.8 Critical severity
File Uploader for WooCommerce: Unrestricted Upload of File with Dangerous Type
The File Uploader for WooCommerce plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the callback function for the 'add-image-data' REST API endpoint in all versions up to, and including, 1.0.3. This makes it po