Critical vulnerability
Critical arbitrary file upload in the Printcart Store WordPress plugin (CVE-2026-19803)
Arbitrary file upload in Printcart Store · WordPress plugins
CVE-2026-19803
Printcart Store <= 2.13.2 - Unauthenticated Arbitrary File Upload via nbu_crop_image 'url' Parameter
- Severity
- Critical 9.8
- Published
- 7 Nov 2026
| Software | Affected versions |
|---|---|
| Printcart Integration (WordPress plugin)WordPress plugins |
|
- CVE.org https://www.cve.org/CVERecord?id=CVE-2026-19803
From NVD, the CVE Program, OSV.dev with the GitHub Advisory Database, WPVulnerability, WordPress's security advisories and CISA's Known Exploited Vulnerabilities catalog, as they stood when this was written. Each vulnerability's own page has its latest rating and fix. This product uses the NVD API but is not endorsed or certified by the NVD.