automated_import_products_to_cart vulnerabilities

CVEs whose affected-version data names the automated_import_products_to_cart package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-113617Critical· 9.9

1w ago

Automated Import Products to Cart < 1.0.4 - Subscriber+ Arbitrary File Read and Deletion via Path Traversal

The Automated Import Products to Cart WordPress plugin before 1.0.4 does not sanitize a user-supplied file path before using it to read and delete files, allowing users with minimal permissions, such as subscribers, to read arbitrary fil…

▾ MidnightEPSS 0.34%via CVEORG