Exploit for CVE-2025-10162

githubexploit · 2026-05-30

Description

Exploit for CVE-2025-10162 with no additional details.

Parameterfilename · query param

Pathwp-json/wooconvo/v1/download-file

Path traversal vulnerability in OrderConvo plugin allows reading arbitrary files via filename parameter in download-file endpoint

7.5

HIGH SEVERITY

Version 3.1

VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Attack Vector:NETWORK

Attack Complexity:LOW

Privileges Required:NONE

User Interaction:NONE

Scope:UNCHANGED

Confidentiality:HIGH

Integrity:NONE

Availability:NONE

99%confidence this exploit runs

Based on 1 file(s) in the source

3.6%higher than 88.2% of all CVEs

Updated 2026-07-04

Modified:2026-05-30 22:15

Last Seen:2026-05-30 22:30

Reporter:diamorphine666

Written in:Python

Last commit:2026-05-30

README2 lines

## https://sploitus.com/exploit?id=5EDA98FC-35C9-56B3-933B-20E7F256054E
No description provided