CVE-2026-122265 | vanquish83 Vanquish Upload Files Plugin up to 2.7.13 on WordPress vanupfi_user_can_access_order_files vanupfi_file_name path traversal

A vulnerability labeled as problematic has been found in vanquish83 Vanquish Upload Files Plugin up to 2.7.13 on WordPress. Impacted is the function vanupfi_user_can_access_order_files. Such manipulation of the argument vanupfi_file_name leads to path traversal.

This vulnerability is referenced as CVE-2026-122265. It is possible to launch the attack remotely. No exploit is available.VulDB Recent EntriesRead More