CVE-2026-25397

Summary

Path Traversal: '…/…//' vulnerability in Snowray Software File Uploader for WooCommerce file-uploader-for-woocommerce allows Path Traversal.This issue affects File Uploader for WooCommerce: from n/a through <= 1.0.4.

Affected Software

VendorProductVersion RangeStatus
Snowray SoftwareFile Uploader for WooCommerce0 <= 1.0.4affected

Weaknesses

  • CWE-35: Path Traversal: '…/…//'

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: total

References