Critical · 10.0 CVE-2025-47641 EUVD-2025-28108GHSA-cqh9-2fgp-cxw2

WordPress Printcart Web to Print Product Designer for WooCommerce plugin <= 2.3.9 - Arbitrary File Upload Vulnerability

Published May 23, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: printcart Product: Printcart Web to Print Product Designer for WooCommerce Category: Web / CMS

Description

Unrestricted Upload of File with Dangerous Type vulnerability in printcart Printcart Web to Print Product Designer for WooCommerce printcart-integration allows Upload a Web Shell to a Web Server.This issue affects Printcart Web to Print Product Designer for WooCommerce: from n/a through <= 2.3.9.

Affected products

Vendor	Product	Affected	Fixed
printcart	Printcart Web to Print Product Designer for WooCommerce	≤ 2.3.9	—

References

https://patchstack.com/database/Wordpress/Plugin/printcart-integration/vulnerability/wordpress-printcart-web-to-print-product-designer-for-woocommerce-2-3-6-arbitrary-file-upload-vulnerability?_s_id=cve vdb-entry