CVE-2025-9215 | StoreEngine Plugin up to 1.5.0 on WordPress file_download path traversal

SecurityVulns
Yanac

A vulnerability identified as critical has been detected in StoreEngine Plugin up to 1.5.0 on WordPress. Impacted is the function file_download. This manipulation causes path traversal.

This vulnerability is handled as CVE-2025-9215. The attack can be initiated remotely. There is not any exploit available.VulDB Recent EntriesRead More