Skip to content
OpenAdvisories
High · 7.5 CVE-2025-39568 EUVD-2025-11751GHSA-44wg-5mf9-mm82

WordPress StoreContrl Woocommerce plugin <= 4.1.3 - Arbitrary File Download Vulnerability

Published Apr 17, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Arture B.V. StoreContrl Woocommerce storecontrl-wp-connection allows Path Traversal.This issue affects StoreContrl Woocommerce: from n/a through <= 4.1.3.

Affected products

VendorProductAffectedFixed
Arture StoreContrl Woocommerce ≤ 4.1.3 —

References