CVE-2025-10162 | Admin and Customer Messages After Order for WooCommerce Plugin path traversal

October 7, 2025 Yanac

A vulnerability identified as critical has been detected in Admin and Customer Messages After Order for WooCommerce Plugin up to 13 on WordPress. This affects an unknown part. The manipulation leads to path traversal.

This vulnerability is traded as CVE-2025-10162. It is possible to initiate the attack remotely. There is no exploit available.

You should upgrade the affected component.VulDB Recent EntriesRead More