S4E just found an informational finding from tcp full port service scan

CVE

CVE-2025-10162

7.5

CVSShigh

Exploitable remotely over the internet · no authentication required.

Description

The Admin and Customer Messages After Order for WooCommerce: OrderConvo WordPress plugin before 14 does not validate the path of files to be downloaded, which could allow unauthenticated attacker to read/download arbitrary files via a path traversal attack

Attack Vector

Network

Privileges Req.

None

User Interaction

None

admin and customer messages after order for woocommerce: orderconvo

Updated Sep 28, 2026View on NVD →

S4E scanner

highProduct Based Web Vulnerabilities~10 seconds

CVE-2025-10162 Scanner

CVE-2025-10162 Scanner - Path Traversal vulnerability in WordPress OrderConvo

Used 2.2k times · 3.3k assets checked · url

Scanner page →Run scanner

CVE history: admin and customer messages after order for woocommerce: orderconvo

Predict next CVE date with AI

Monitor this CVE on your assets

S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.

Create a free account →