Threats tagged 'ghsa-cmrc-7c99-5736'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	–	CVE-2026-113617The Automated Import Products to Cart WordPress plugin before 1.0.4 does not sanitize a user-supplied file path before High2026-10-29GCVE DatabaseCVE-2026-113617 The Automated Import Products to Cart WordPress plugin versions before 1.0.4 improperly handle user-supplied file paths, allowing users with minimal permissions to read and delete arbitrary files on the server, including sensitive files such as those containing database credentials. Report on CVE-2026-113617 Vulnerability #ghsa-cmrc-7c99-5736	GCVE Database	2026-10-29

Page 1 of 1