CVE-2026-15019 | kamalyon Direct Download for WooCommerce Plugin up to 1.19 on WordPress include path traversal

A vulnerability marked as problematic has been reported in kamalyon Direct Download for WooCommerce Plugin up to 1.19 on WordPress. This affects the function include. Performing a manipulation results in path traversal.

This vulnerability is reported as CVE-2026-15019. The attack is possible to be carried out remotely. No exploit exists.VulDB Recent EntriesRead More