CVE-2026-19803

The Printcart Store – Web to Print Product Designer for WooCommerce plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 2.13.2. This is due to the nbucropimage AJAX handler accepting a user-supplied url parameter that NbdesignerIO::converturltopath...