CVE · Medium

CVE-2026-122265 — Vanquish Upload Files for WooCommerce [vanquish-upload-files-for-woocommerce] < 2.8.0

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2026-122265 Vanquish Upload Files for WooCommerce [vanquish-upload-files-for-woocommerce] < 2.8.0 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Medium 5.9 < 2.8.0 2.8.0 2026-11-07 —

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.