Executive brief
The Printcart Web to Print Product Designer plugin for WordPress is vulnerable to a security flaw that allows unauthorized individuals to view files and folders on the web server. This plugin is typically used by e-commerce sites to allow customers to customize products before purchase. An attacker could use this vulnerability to map out the server's file structure, potentially identifying sensitive configuration files or other data that could be used in further attacks.
Technical details
A path traversal vulnerability exists in the Printcart Web to Print Product Designer for WooCommerce plugin (up to version 2.4.8) due to insufficient validation of user-supplied input in the 'gallery_image_exists.php' file. Specifically, the 'path' and 'folder' parameters are used to construct file paths without proper sanitization, allowing an unauthenticated attacker to provide Base64-encoded absolute paths to retrieve directory listings. By exploiting this, an attacker can enumerate files and directories across the server, which may facilitate further attacks by revealing sensitive file locations or system configurations. As of the advisory date, no official patch has been released.
Affected products
- Printcart Printcart Web to Print Product Designer for WooCommerce <= 2.4.8
Timeline
- 2026-05-28: other: Vulnerability added to WPScan database
- 2026-06-04: disclosed: Public disclosure by WPScan
- 2026-06-26: advisory: NVD publication date