https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T09:37:00.701668+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2023-4216 CVE-2023-4216 — Orders Tracking for WooCommerce < 1.2.6 - Admin+ Arbitrary File Access/Read 2026-10-08T09:37:00.720180+00:00

Affected: Unknown Orders Tracking for WooCommerce

The Orders Tracking for WooCommerce WordPress plugin before 1.2.6 doesn't validate the file_url parameter when importing a CSV file, allowing high privilege users with the manage_woocommerce capability to access any file on the web server via a Traversal attack. The content retrieved is however limited to the first line of the file.