The vulnerability identified as CVE-2025-48317 affects the WooCommerce Payment Gateway for Saferpay plugin developed by Stefan Keller. It is a path traversal issue where the input path containing '.../...//' sequences can bypass directory restrictions, potentially allowing unauthorized access to files on the server. The affected versions include all versions up to 0.4.9. The CVSS 3.1 base score is 7.5, reflecting a high severity vulnerability exploitable remotely without authentication or user interaction, impacting confidentiality but not integrity or availability.

Successful exploitation of this path traversal vulnerability could allow an attacker to read sensitive files on the server hosting the WooCommerce Payment Gateway for Saferpay plugin, potentially exposing confidential information. The vulnerability does not affect integrity or availability according to the CVSS vector. There are no reported exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch links are currently available. Users of the WooCommerce Payment Gateway for Saferpay plugin should monitor the vendor's communications for updates and apply any official patches once released. Until then, consider restricting access to the affected plugin or implementing web application firewall rules to block suspicious path traversal attempts.