CVE-2026-44307

CVE-2026-44307 describes a Windows-specific path traversal in the Mako template library prior to 1.3.12. A URI using backslash traversal (for example, \..\..\secret.txt) bypasses the directory traversal check in Template.__init__ and the posixpath-based normalization in TemplateLookup.get_templat...

WordPress WooCommerce Google Sheet Connector Plugin <= 1.3.11 is vulnerable to Broken Access Control

Software WooCommerce Google Sheet Connector Type Plugin Vulnerable versions = 1.3.11 Fixed in 1.3.12 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2024-1562 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID a751d510280b Credits Francesco...