Path Traversal Vulnerability in Hippoo Mobile App for WooCommerce Plugin

CVE-2025-13339

What is CVE-2025-13339?

The Hippoo Mobile App for WooCommerce plugin for WordPress is affected by a Path Traversal vulnerability that enables unauthenticated attackers to access and read arbitrary files on the server. This occurs through the template_redirect() function, potentially exposing sensitive data located on the web server. All versions up to and including 1.7.1 are susceptible to this flaw, making it imperative for users to review their configurations and update to secure versions.

References