Integration Opvius AI for WooCommerce <= 1.3.0 - Unauthenticated Arbitrary File Deletion/Read via Path Traversal
criticalThe Integration Opvius AI for WooCommerce plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.3.0. This is due to the `process_table_bulk_actions()` function processing user-supplied file paths without authentication checks, nonce verification, or path validation. This makes it...
- CVSS:
- 9.8
- Affected:
- up to 1.3.0
- Fix:
- No patched version reported
- Disclosed:
- Jan 13, 2026