CVE-2026-19803
The Printcart Store – Web to Print Product Designer for WooCommerce plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 2.13.2. This is due to the `nbu_crop_image` AJAX handler accepting a user-supplied `url`…
- CVSS
- 9.8 Critical
- EPSS
- 1.0%
- Percentile
- 62
- Published
- 2026-11-07
- Force
- 7 of 12
- Public PoC
- 1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H