CVE-2026-9725 | Printcart Web to Print Product Designer for WooCommerce Plugin Path Validation store_design_data path traversal (EUVD-2026-41488)

A vulnerability marked as critical has been reported in Printcart Web to Print Product Designer for WooCommerce Plugin up to 2.5.2 on WordPress. Impacted is the function store_design_data of the component Path Validation Handler. This manipulation of the argument nbd_item_key causes path traversal. This vulnerability is handled as CVE-2026-9725. The attack can be initiated remotely. There is not any exploit available.