CVE-2026-2421: ilGhera Carta Docente for WooCommerce <= 1.5.0 - Authenticated (Administrator+) Path Traversal to Arbitrary File Deletion via 'cert' Parameter
The ilGhera Carta Docente for WooCommerce plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.5.0 via the 'cert' parameter of the 'wccd-delete-certificate' AJAX action. This is due to insufficient file path validation before performing a file deletion. This makes it possible for authenticated attackers, with Administrator-level access and above, to delete arbitrary files on the server, such as wp-config.php, which can make site takeover and remote code execution possible.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-2421?
CVE-2026-2421 has a high severity rating due to its potential for arbitrary file deletion.
How do I fix CVE-2026-2421?
To fix CVE-2026-2421, update the ilGhera Carta Docente for WooCommerce plugin to version 1.5.1 or above.
What are the consequences of CVE-2026-2421?
The consequences of CVE-2026-2421 include unauthorized access to delete files on the server, potentially leading to data loss.
Who is affected by CVE-2026-2421?
CVE-2026-2421 affects all versions of the ilGhera Carta Docente for WooCommerce plugin up to and including 1.5.0.
How can I confirm if I am vulnerable to CVE-2026-2421?
You can confirm if you are vulnerable to CVE-2026-2421 by checking if you are using ilGhera Carta Docente for WooCommerce version 1.5.0 or earlier.