This vulnerability in Printcart Web to Print Product Designer for WooCommerce (<= 2.3.9) permits unrestricted upload of files with dangerous types, such as web shells, to the web server. This lack of proper file upload validation enables remote attackers to execute arbitrary code on the server, potentially leading to full system compromise. The CVSS 3.1 score of 10.0 reflects the high impact and ease of exploitation (network attack vector, no privileges or user interaction required). The vulnerability is publicly disclosed but no patch or mitigation guidance from the vendor is currently available.

Successful exploitation allows attackers to upload malicious files, including web shells, resulting in full compromise of the affected web server. This includes complete loss of confidentiality, integrity, and availability of the system hosting the vulnerable plugin. The critical CVSS score confirms the severity and potential for severe operational disruption or data breach.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict file upload permissions, disable or limit the plugin functionality if possible, and monitor for suspicious file uploads. Avoid exposing the affected plugin to untrusted users. Do not rely on generic mitigations unless specifically recommended by the vendor.