CVE-2026-113617 - Automated Import Products to Cart < 1.0.4 - Subscriber+ Arbitrary File Read and Deletion via Path Traversal
CVE ID :CVE-2026-113617 Published : Oct. 29, 2026, 6:17 a.m. | 6 hours, 7 minutes ago Description :The Automated Import Products to Cart WordPress plugin before 1.0.4 does not sanitize a user-supplied file path before using it to read and delete files, allowing users with minimal permissions,...