CVE-2026-49779mediumCWE-35

CVE-2026-49779: medium-severity vulnerability in Addify Tax Exempt for WooCommerce

WordPress Tax Exempt for WooCommerce plugin < 1.9.5 - Path Traversal vulnerability

Published 02 Jul 2026 · Updated 28 Jul 2026

Follow this CVE + Monitor Tax Exempt for WooCommerce

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 6.5epss 0.4%

Path Traversal: '.../...//' vulnerability in Addify Tax Exempt for WooCommerce allows Path Traversal. This issue affects Tax Exempt for WooCommerce: from n/a before 1.9.5.

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Affected products

Addify · Tax Exempt for WooCommerce

References

https://patchstack.com/database/wordpress/plugin/woocommerce-tax-exempt-plugin/vulnerability/wordpress-tax-exempt-for-woocommerce-plugin-1-9-3-path-traversal-vulnerability?_s_id=cve