VULNERABILITY INTELLIGENCE

CVE-2026-25397

CVSS score7.5 HIGH

EPSS probability0.45%

CISA KEVNot currently listed

Published2026-03-25

Last modified2026-06-17

Description

Path Traversal: '.../...//' vulnerability in Snowray Software File Uploader for WooCommerce file-uploader-for-woocommerce allows Path Traversal.This issue affects File Uploader for WooCommerce: from n/a through <= 1.0.4.