High severity8.6NVD Advisory· Published Jul 27, 2026· Updated Jul 27, 2026
CVE-2025-15662
CVE-2025-15662
Description
The Printcart Web to Print Product Designer for WooCommerce WordPress plugin before 2.5.3 does not restrict a user-supplied URL before fetching it server-side and does not enforce a valid authorization check, allowing unauthenticated attackers to read arbitrary local files (including configuration files containing database credentials and secret keys) and to make server-side requests to internal resources.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1- Range: <2.5.3
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.