CVE-2025-15662

Name of the Vulnerable Software and Affected Versions Printcart Web to Print Product Designer for WooCommerce WordPress plugin versions prior to 2.5.3

Description An issue exists where the software fails to restrict user-supplied URLs before fetching them server-side and does not enforce valid authorization checks. This allows unauthenticated attackers to read arbitrary local files, such as configuration files containing secret keys and database credentials, and to perform server-side requests to internal resources.

Recommendations Update Printcart Web to Print Product Designer for WooCommerce WordPress plugin to version 2.5.3 or later.