CVE-2025-10162 OrderConvo < 14 - Unauthenticated Arbitrary File Read

The Admin and Customer Messages After Order for WooCommerce: OrderConvo WordPress plugin before 14 does not validate the path of files to be downloaded, which could allow unauthenticated attacker to read/download arbitrary files via a path traversal attack...

CVE-2025-10162

The CVE-2025-10162 issue affects the OrderConvo WordPress plugin (Admin and Customer Messages After Order for WooCommerce) prior to v14. It stems from unvalidated file paths during downloads, enabling an unauthenticated attacker to read/download arbitrary files via a path traversal attack. Result...

EUVD-2018-6715

Malware in sbrugna...

EUVD-2011-0431

Malware in sbrugna...

EUVD-2003-1417

Malware in sbrugna...

EUVD-2016-1836

Malware in sbrugna...

EUVD-2018-6563

Malware in sbrugna...

EUVD-1999-0175

Malware in sbrugna...

EUVD-2007-2179

Malware in sbrugna...

EUVD-2017-18800

Malware in sbrugna...

EUVD-2019-5467

Malware in sbrugna...

EUVD-2016-6285

Malware in sbrugna...

EUVD-2003-1127

Malware in sbrugna...

EUVD-2013-5479

Malware in sbrugna...

EUVD-2017-16485

Malware in sbrugna...

EUVD-2005-0071

Malware in sbrugna...

EUVD-2015-0856

Malware in sbrugna...

EUVD-2019-8673

Malware in sbrugna...

EUVD-2017-6749

Malware in sbrugna...

EUVD-2017-8913

Malware in sbrugna...