Path Traversal Vulnerability in UPC/EAN/GTIN Code Generator by UKR Solution
CVE-2025-53588

7.7HIGH

Key Information:

Vendor

WordPress
Status
Upc/ean/gtin Code Generator
Vendor
CVE Published:
28 August 2025

What is CVE-2025-53588?

An improper limitation of a pathname to a restricted directory in the UPC/EAN/GTIN Code Generator allows unauthorized access to sensitive files. This flaw permits attackers to exploit the path traversal vulnerability, leading to potential information disclosure and file manipulation risks. It is crucial for users of the affected versions to apply necessary security updates to protect their data.

Affected Version(s)

UPC/EAN/GTIN Code Generator <= 2.0.2

References

https://patchstack.com/database/wordpress/plugin/upc-ean-...
vdb-entry

CVSS V3.1

Score:
7.7
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Mika (Patchstack Alliance)
.
CVE-2025-53588 : Path Traversal Vulnerability in UPC/EAN/GTIN Code Generator by UKR Solution