This vulnerability in the File Uploader for WooCommerce plugin by Snowray Software allows path traversal via the '.../...//' sequence. It affects versions up to 1.0.4 and can be exploited remotely without authentication. The CVSS score is 7.5, indicating a high severity with network attack vector, low attack complexity, no privileges required, no user interaction, and high confidentiality impact but no impact on integrity or availability. No official patch or mitigation guidance is currently provided by the vendor.

Successful exploitation could allow an attacker to read arbitrary files on the server, potentially exposing sensitive information. There is no indication of impact on data integrity or availability. No known exploits in the wild have been reported to date.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a patch is available, consider restricting access to the plugin or disabling it if possible to reduce exposure. Monitor official Snowray Software channels for updates.