CVE-2025-10268 is a CWE-22 path traversal vulnerability affecting the Printcart Web to Print Product Designer for WooCommerce plugin for WordPress, versions through 2.4.8. The vulnerability enables attackers to bypass directory restrictions and access directory listings outside the intended scope, potentially disclosing sensitive server file information. There is no CVSS score or vendor advisory indicating a patch or fix at this time.

An attacker exploiting this vulnerability can obtain directory listings of arbitrary directories on the server hosting the vulnerable plugin. This may lead to exposure of sensitive information about the server's file system structure and contents, which could facilitate further attacks or information gathering. There is no indication of remote code execution or privilege escalation from the provided data.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider restricting access to the affected plugin or server directories via other means such as web server configuration or access controls to limit exposure.