CVE-2026-9662

The Recover Exit For WooCommerce plugin for WordPress is vulnerable to Local File Inclusion in all versions up to and including 1.0.3. This is due to insufficient validation and sanitization of the user-controlled `tpf` POST parameter before it is used in an `include()` path in the `recover_exit()` function. This makes it possible for unauthenticated attackers to perform path traversal and include unintended local PHP files, which can lead to sensitive information exposure and, in certain deployment chains, code execution.

• CWE-98

• https://plugins.trac.wordpress.org/browser/recoverexit-for-woocommerce/tags/1.0.3/recover_exit_main.php#L41
• https://plugins.trac.wordpress.org/browser/recoverexit-for-woocommerce/tags/1.0.3/recover_exit_main.php#L42
• https://plugins.trac.wordpress.org/browser/recoverexit-for-woocommerce/tags/1.0.3/recoverexit_woocommerce.php#L52
• https://plugins.trac.wordpress.org/browser/recoverexit-for-woocommerce/trunk/recover_exit_main.php#L41
• https://plugins.trac.wordpress.org/browser/recoverexit-for-woocommerce/trunk/recover_exit_main.php#L42
• https://plugins.trac.wordpress.org/browser/recoverexit-for-woocommerce/trunk/recoverexit_woocommerce.php#L52
• https://www.wordfence.com/threat-intel/vulnerabilities/id/10552714-c8fb-455c-ad61-c0ef2db4b69f?source=cve

Published

Jun 9, 2026

Last Modified

Jul 23, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-96602A flaw has been found in Abdurrab5 online-makeup-store. This…7.3
• CVE-2026-96603A vulnerability has been found in Abdurrab5 online-makeup-st…7.3
• CVE-2026-96604A vulnerability was identified in SoftNews Media Group DataL…7.3
• CVE-2026-96606A security flaw has been discovered in LB-Link BL-CPE600EU 5…5.3
• CVE-2026-96609Robur Albatross 1.0.0 through 2.x before 2.7.2 does not limi…7.1
• CVE-2026-96611FFmpeg before 9.0 has a signed integer overflow in libavform…6.9
• CVE-2026-96651Plex Media Server before 1.43.3.10861 builds a file path fro…6.5
• CVE-2026-96652Plex Media Server before 1.43.3.10861 allows SSRF via '/play…4.3
• CVE-2026-96654Plex Media Server before 1.43.3.10861 does not correctly neu…6.5
• CVE-2026-96655Plex Media Server before 1.43.3.10861 allows an authenticate…4.3
• CVE-2026-96656Plex Media Server before 1.43.3.10861 allows an admin user t…7.2
• CVE-2026-9667IBM WebSphere Application Server 9.0, and 8.5 is vulnerable …5.3