CVE-2025-10412 | Product Options and Price Calculation Formulas for WooCommerce Plugin uni_cpo_upload_file unrestricted upload

A vulnerability classified as critical was found in Product Options and Price Calculation Formulas for WooCommerce Plugin up to 4.9.54 on WordPress. Affected by this issue is the function uni_cpo_upload_file. Executing manipulation can lead to unrestricted upload.

This vulnerability is tracked as CVE-2025-10412. The attack can be launched remotely. No exploit exists.