CVE-2025-15662 is a high-severity SSRF vulnerability in the Printcart Web to Print Product Designer for WooCommerce plugin for WordPress. Versions prior to 2.5.3 do not validate or restrict user-supplied URLs before fetching them server-side, nor do they enforce authorization checks. This flaw permits unauthenticated attackers to read arbitrary local files, including sensitive configuration files, and to perform server-side requests to internal network resources, potentially exposing confidential data and internal services.

Successful exploitation allows unauthenticated attackers to read arbitrary local files on the server, including configuration files that may contain database credentials and secret keys. Additionally, attackers can make server-side requests to internal resources, which may lead to further information disclosure or internal network reconnaissance. The vulnerability impacts confidentiality but does not affect integrity or availability directly.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or patch information is provided, users should monitor the vendor's communications for updates. Until a patch is available, restrict access to the plugin and consider disabling it if possible to reduce exposure.