The WordPress plugin OrderConvo version 13.5 contains a path traversal vulnerability. This type of vulnerability typically allows an attacker to manipulate file paths to access files and directories outside the intended scope, potentially exposing sensitive information. The available data does not include detailed technical specifics or exploitation methods. No patch or fix information is provided, and no active exploitation has been reported.

If exploited, this vulnerability could allow unauthorized access to files on the server hosting the WordPress plugin, potentially leading to information disclosure. However, the absence of known exploits in the wild suggests limited current impact.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, consider restricting access to the plugin and monitoring for unusual file access patterns related to the plugin's functionality.