CVE-2026-19803 | Printcart Store Plugin up to 2.13.2 on WordPress nbu_crop_image AJAX handler convert_url_to_path url unrestricted upload

November 7, 2026 Yanac

A vulnerability described as critical has been identified in Printcart Store Plugin up to 2.13.2 on WordPress. This affects the function Nbdesigner_IO::convert_url_to_path of the component nbu_crop_image AJAX handler. Executing a manipulation of the argument url can lead to unrestricted upload.

This vulnerability is registered as CVE-2026-19803. It is possible to launch the attack remotely. No exploit is available.VulDB Recent EntriesRead More