CVE-2025-10268

Printcart Web to Print Product Designer for WooCommerce <= 2.4.8 - Unauthenticated Folder Content Disclosure via Path Traversal

The Printcart Web to Print Product Designer for WooCommerce WordPress plugin through 2.4.8 is vulnerable to path traversal which makes it possible for the attacker to retrieve the directory listing for arbitrary directories on the server.

Affected

Printcart Web to Print Product Designer for WooCommerce

CVSS v3.1 CNA

5.3 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

EPSS

0.39% chance of exploitation in the next 30 days, 31st percentile

Published

2026-06-26

Proof-of-concept exploits (1)

• https://wpscan.com/vulnerability/0cff6fb3-339b-4eb6-969b-b3a43613cc71/

References

• CVE Record
• NVD entry