PT-2026-54985 · Addify · Tax Exempt For Woocommerce

·

CVE-2026-49779

·

Published

2026-07-02

·

Updated

2026-07-28

CVSS v3.1

6.5

Medium

VectorAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions Tax Exempt for WooCommerce versions prior to 1.9.5
Description An issue in the Addify Tax Exempt for WooCommerce plugin allows for path traversal, a condition where an attacker can access files and directories that are stored outside the web root folder by using special characters like .../...//.
Recommendations Update Tax Exempt for WooCommerce to version 1.9.5 or later.

Fix

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2026-49779

Affected Products

Tax Exempt For Woocommerce