PULSE
EN VIVO90señales / 24h
EN
FEED
ransomshinyhunters reclama a RingCentral, Inc. · US · Technologyransomshinyhunters reclama a Ernst & Young · US · Professional Servicesransomqilin reclama a Savills France · FR · Professional Servicesransomqilin reclama a Wilbert's · US · Retail & E-Commerceransomdragonforce reclama a Katathani Phuket Beach Resort · TH · Hospitalityransomcrpxo reclama a IPTV Platform · US · Technology · 3.2 GBransomcrpxo reclama a Marketech · US · Technology · 6.7 GBransomcrpxo reclama a American Hospice & Home Health Services (Ahhh Care) · US · Healthcare · 11.3 GBransomcrpxo reclama a Bright Star Partners Insurance · US · Financial Services · 41.8 GBransomcrpxo reclama a eCare Platform · US · Healthcare · 14.2 GBransomcrpxo reclama a Dignity Phoenix · US · Healthcare · 5.4 GBransomcrpxo reclama a Schorr Law · US · Professional Services · 27.6 GBransomcrpxo reclama a Simpkins Law Firm · US · Professional Services · 31.2 GBransomcrpxo reclama a Leah Walker Orthodontics · US · Healthcare · 8.3 GBransomshinyhunters reclama a RingCentral, Inc. · US · Technologyransomshinyhunters reclama a Ernst & Young · US · Professional Servicesransomqilin reclama a Savills France · FR · Professional Servicesransomqilin reclama a Wilbert's · US · Retail & E-Commerceransomdragonforce reclama a Katathani Phuket Beach Resort · TH · Hospitalityransomcrpxo reclama a IPTV Platform · US · Technology · 3.2 GBransomcrpxo reclama a Marketech · US · Technology · 6.7 GBransomcrpxo reclama a American Hospice & Home Health Services (Ahhh Care) · US · Healthcare · 11.3 GBransomcrpxo reclama a Bright Star Partners Insurance · US · Financial Services · 41.8 GBransomcrpxo reclama a eCare Platform · US · Healthcare · 14.2 GBransomcrpxo reclama a Dignity Phoenix · US · Healthcare · 5.4 GBransomcrpxo reclama a Schorr Law · US · Professional Services · 27.6 GBransomcrpxo reclama a Simpkins Law Firm · US · Professional Services · 31.2 GBransomcrpxo reclama a Leah Walker Orthodontics · US · Healthcare · 8.3 GB
← Todos los CVEs
CVE Watch27 jul 2026

CVE-2025-15662

The Printcart Web to Print Product Designer for WooCommerce WordPress plugin before 2.5.3 does not restrict a user-supplied URL before fetch

CVSS

—

Sin CVSS

EPSS

—

KEV

—

Exploit Today

0

0-100

Publicado: 27 jul 2026 · Última mod.: 27 jul 2026

EPSS · 30d

Sin historial EPSS suficiente todavía.

Descripción técnica

The Printcart Web to Print Product Designer for WooCommerce WordPress plugin before 2.5.3 does not restrict a user-supplied URL before fetching it server-side and does not enforce a valid authorization check, allowing unauthenticated attackers to read arbitrary local files (including configuration files containing database credentials and secret keys) and to make server-side requests to internal resources.

Referencias oficiales
CVEs relacionados

Sin CVEs relacionados por CWE o producto.