Skip to content
OpenAdvisories

Vendor

kamalyon

1 known vulnerabilities.

Products

Direct Download for WooCommerce 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2026-15019

    Direct Download for WooCommerce <= 1.19 - Unauthenticated Arbitrary File Read via 'file_id' Path Segment

    The Direct Download for WooCommerce plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.19 via the (top-level include) function. This makes it possible for unauthenticated attackers to read the contents of arbitra…

    kamalyon Direct Download for WooCommerce Web / CMS