WordPress security by component

PoloPag – Pix Automático para Woocommerce

Plugin description

PoloPag – Pix Automático para Woocommerce is a WordPress component with 1 published CVE record in this archive. The latest tracked vulnerability was published Nov 06, 2025; the highest CVE/CNA score is 7.5.

Plugin slug: wc-polo-payments

Latest vulnerability

CVE-2025-60189: PoloPag – Pix Automático para Woocommerce: Filesystem traversal

PoloPag – Pix Automático para Woocommerce is affected by filesystem traversal. Exposure depends on how the affected operation is made reachable by the site. A crafted path can escape the intended directory and reach files or directories elsewhere on the server.

PublishedNov 06, 2025

Safe version guidanceSee mitigation notes

		Safe version
Nov 06, 2025	CVE-2025-60189 PoloPag – Pix Automático para Woocommerce: Filesystem traversal PoloPag – Pix Automático para Woocommerce is affected by filesystem traversal. Exposure depends on how the affected operation is made reachable by the site. A crafted path can escape the intended directory and reach files or directories elsewhere on the server.	See mitigation notes	CVE7.5 NVDPending