direct_download_for_woocommerce vulnerabilities

CVEs whose affected-version data names the direct_download_for_woocommerce package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-15019High· 7.5

2w ago

The Direct Download for WooCommerce plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.19 via the (top-level include) function

The Direct Download for WooCommerce plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.19 via the (top-level include) function. This makes it possible for unauthenticated attackers to read t…

▾ Twilightkamalyon · Direct Download for WooCommerceEPSS 0.68%via NVD