Integration Opvius Ai For Woocommerce
Approved changes feed: RSS · Atom
cpe:2.3:a:woosaai:integration_opvius_ai_for_woocommerce:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Woosaai (c8bdcc89-261d-528b-a49f-d9efc76cc389) |
|---|---|
| Product | Integration Opvius Ai For Woocommerce (6571f783-03b3-5834-a940-9e1e52e8267a) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-14301 |
vulnerable | 2026-06-08 07:06:34.229637 |
Integration Opvius AI for WooCommerce <= 1.3.0 - Unauthenticated Arbitrary File Deletion/Read via Path Traversal
CRITICAL (9.8)
The Integration Opvius AI for WooCommerce plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.3.0. This is due to the `process_table_bulk_actions()` function processing user-supplied file paths without authentication checks, nonce verification, or path validation. This makes it possible for unauthenticated attackers to delete or download arbitrary files on the server via the `wsaw-log[]` POST parameter, which can be leveraged to delete critical files like `wp-config.php` or read sensitive configuration files.
Published: 2026-01-14T05:28:05.974Z
Updated: 2026-04-08T16:45:44.849Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.