Automated Import Products to Cart (< 1.0.4) - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/products/automated-import-products-to-cart--1.0.4/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioThu, 29 Oct 2026 13:19:09 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgAutomated Import Products to Cart: Arbitrary file read and deletion (CVE-2026-113617)https://feed.craftedsignal.io/briefs/2026-10-wordpress-import-plugin-lfi/Thu, 29 Oct 2026 13:19:09 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-10-wordpress-import-plugin-lfi/The Automated Import Products to Cart WordPress plugin before 1.0.4 does not sanitize user-supplied file paths, allowing users with minimal permissions to read or delete arbitrary files on the server.criticaladvisory