{"id":"CVE-2025-10268","state":"PUBLISHED","title":"Printcart Web to Print Product Designer for WooCommerce <= 2.4.8 - Unauthenticated Folder Content Disclosure via Path Traversal","description":"The Printcart Web to Print Product Designer for WooCommerce WordPress plugin through 2.4.8 is vulnerable to path traversal which makes it possible for the attacker to retrieve the directory listing for arbitrary directories on the server.","publishedAt":"2026-06-26T06:00:02.131Z","updatedAt":"2026-06-26T12:18:49.371Z","severity":{"score":5.3,"label":"Medium","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","source":"CISA-ADP"},"assigner":"WPScan","products":["Unknown Printcart Web to Print Product Designer for WooCommerce"],"affected":[{"vendor":"Unknown","product":"Printcart Web to Print Product Designer for WooCommerce","defaultStatus":"unknown","versions":[{"version":"0","status":"affected","lessThanOrEqual":"2.4.8","versionType":"semver"}]}],"references":["https://wpscan.com/vulnerability/0cff6fb3-339b-4eb6-969b-b3a43613cc71/"],"weaknesses":[],"ingestedAt":"2026-10-29T20:08:20.985Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2025/10xxx/CVE-2025-10268.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2025-10268","state":"PUBLISHED","datePublished":"2026-06-26T06:00:02.131Z","dateUpdated":"2026-06-26T12:18:49.371Z","assignerShortName":"WPScan","assignerOrgId":"1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81","dateReserved":"2025-09-11T12:30:32.763Z"},"containers":{"cna":{"title":"Printcart Web to Print Product Designer for WooCommerce <= 2.4.8 - Unauthenticated Folder Content Disclosure via Path Traversal","descriptions":[{"lang":"en","value":"The Printcart Web to Print Product Designer for WooCommerce WordPress plugin through 2.4.8 is vulnerable to path traversal which makes it possible for the attacker to retrieve the directory listing for arbitrary directories on the server."}],"affected":[{"vendor":"Unknown","product":"Printcart Web to Print Product Designer for WooCommerce","defaultStatus":"unknown","versions":[{"version":"0","status":"affected","lessThanOrEqual":"2.4.8","versionType":"semver"}]}],"references":[{"url":"https://wpscan.com/vulnerability/0cff6fb3-339b-4eb6-969b-b3a43613cc71/","tags":["exploit","vdb-entry","technical-description"]}],"problemTypes":[{"descriptions":[{"description":"CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"WPScan","orgId":"1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81","dateUpdated":"2026-06-26T06:00:02.131Z"},"credits":[{"lang":"en","value":"D01EXPLOIT OFFICIAL","type":"finder"},{"lang":"en","value":"WPScan","type":"coordinator"}],"source":{"discovery":"EXTERNAL"},"x_generator":{"engine":"WPScan CVE Generator"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"NONE","confidentialityImpact":"LOW"}},{"other":{"type":"ssvc","content":{"timestamp":"2026-06-26T12:18:40.996000Z","id":"CVE-2025-10268","options":[{"Exploitation":"poc"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-06-26T12:18:49.371Z"}}]}}}