What is CVE-2026-9725?

CVE-2026-9725 is a critical-severity vulnerability in Printcart Web To Print Product Designer For Woocommerce, classified under Path Traversal. CVSS score: 9.1/10. Published 2026-07-03.

How severe is CVE-2026-9725?

Critical severity. CVSS v3 base score is 9.1 out of 10.

Path Traversal in Printcart Web To Print Product Designer For Woocommerce

CVE-2026-9725

The Printcart Web to Print Product Designer for WooCommerce plugin for WordPress is vulnerable to Arbitrary File Deletion in versions up to, and including, 2.5.2 This is due to insufficient path validation in the store_design_data() functi…

Vulnerability class: Path Traversal (Directory Traversal)

CVSS v3 metric

CVSS v3 base score 9.1 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H.

Affected products

Printcart Web To Print Product Designer For Woocommerce — versions 0

Weakness classification (CWE)

CWE-22 — Path Traversal

References

security@wordfence.com
security@wordfence.com
security@wordfence.com
security@wordfence.com
security@wordfence.com
security@wordfence.com

Frequently asked questions

What is CVE-2026-9725?: CVE-2026-9725 is a critical-severity vulnerability in Printcart Web To Print Product Designer For Woocommerce, classified under Path Traversal. CVSS score: 9.1/10. Published 2026-07-03.
How severe is CVE-2026-9725?: Critical severity. CVSS v3 base score is 9.1 out of 10.