vanquish83 vulnerabilities

Products

• Vanquish Upload Files for WooCommerce 1

Latest vanquish83 CVEs

Newest publication first

1. CVE-2026-122265 Vanquish Upload Files for WooCommerce <= 2.7.13 - Unauthenticated Arbitrary File Read via 'vanupfi_file_name' Parameter

   Published 2026-11-07

   Medium·CVSS 5.9 EPSS 0.74%

   The Vanquish Upload Files for WooCommerce plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 2.7.13 via the 'vanupfi_file_name' parameter parameter. This makes it possible for authenticated attackers, with subscriber-level access and a...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.