{"id":"CVE-2025-10268","aliases":["EUVD-2025-210347","GHSA-mm7w-7c83-99xv"],"status":"published","title":"Printcart Web to Print Product Designer for WooCommerce \u003c= 2.4.8 - Unauthenticated Folder Content Disclosure via Path Traversal","description":"The Printcart Web to Print Product Designer for WooCommerce WordPress plugin through 2.4.8 is vulnerable to path traversal which makes it possible for the attacker to retrieve the directory listing for arbitrary directories on the server.","severity":{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-12","score":0.00388,"percentile":0.33375,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2026-06-26T06:00:02Z","modified":"2026-10-06T22:10:00Z","products":[{"vendor":"printcart","product":"printcart web to print product designer for woocommerce"},{"vendor":"unknown","product":"printcart web to print product designer for woocommerce"}],"references":[{"url":"https://wpscan.com/vulnerability/0cff6fb3-339b-4eb6-969b-b3a43613cc71/","tags":["exploit","vdb-entry","technical-description"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-10268"},{"url":"https://wpscan.com/vulnerability/0cff6fb3-339b-4eb6-969b-b3a43613cc71"},{"url":"https://github.com/advisories/GHSA-mm7w-7c83-99xv"}],"sources":{"cve":[{"id":"CVE-2025-10268","title":"Printcart Web to Print Product Designer for WooCommerce \u003c= 2.4.8 - Unauthenticated Folder Content Disclosure via Path Traversal","description":"The Printcart Web to Print Product Designer for WooCommerce WordPress plugin through 2.4.8 is vulnerable to path traversal which makes it possible for the attacker to retrieve the directory listing for arbitrary directories on the server.","status":"published","published":"2026-06-26T06:00:02.131Z","modified":"2026-06-26T12:18:49.371Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"adp"}],"updated_at":"2026-11-02T14:32:30.643267Z"}],"euvd":[{"id":"EUVD-2025-210347","description":"The Printcart Web to Print Product Designer for WooCommerce WordPress plugin through 2.4.8 is vulnerable to path traversal which makes it possible for the attacker to retrieve the directory listing for arbitrary directories on the server.","status":"published","published":"2026-06-26T06:00:02Z","modified":"2026-06-26T12:18:49Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T18:20:24.957062Z"}],"ghsa":[{"id":"GHSA-mm7w-7c83-99xv","title":"The Printcart Web to Print Product Designer for WooCommerce WordPress plugin through 2.4.8 is...","description":"The Printcart Web to Print Product Designer for WooCommerce WordPress plugin through 2.4.8 is vulnerable to path traversal which makes it possible for the attacker to retrieve the directory listing for arbitrary directories on the server.","status":"published","published":"2026-06-26T09:30:46Z","modified":"2026-06-26T15:33:20Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:09:01.181648Z"}],"nvd":[{"id":"CVE-2025-10268","description":"The Printcart Web to Print Product Designer for WooCommerce WordPress plugin through 2.4.8 is vulnerable to path traversal which makes it possible for the attacker to retrieve the directory listing for arbitrary directories on the server.","status":"published","published":"2026-06-26T07:16:21.75Z","modified":"2026-10-06T22:10:00.247Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"secondary"}],"updated_at":"2026-11-02T14:12:02.535029Z"}]}}