TI-2026-86451 CVE-2026-122265 · GHSA-xw2r-p69h-9jmx
Path traversal in Vanquish Upload Files for WooCommerce
Priority LOW 28
The Vanquish Upload Files for WooCommerce plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 2.7.13 via the 'vanupfi_file_name' parameter parameter.