File and Path Handling

Every one of the 7 is a mark on the map. Named now: 1 to 7, most at risk first.

1. Wholesale Market < 2.2.1 - Unauthenticated Arbitrary File DownloadCVE-2022-4298Cedcommerce · CVSS 9.8 · 2.0% likely

   CWE-22

2. Wholesale Market for WooCommerce < 1.0.7 - Unauthenticated Arbitrary File DownloadCVE-2022-4106Cedcommerce · CVSS 7.5 · 0.9% likely

   CWE-552

3. Wholesale Market for WooCommerce < 1.0.8 - Admin+ Arbitrary File DownloadCVE-2022-4108Cedcommerce · CVSS 4.9 · 0.9% likely

   CWE-552

4. WordPress Product Lister for eBay plugin <= 2.0.9 - Local File Inclusion vulnerabilityCVE-2025-39384cedcommerce · CVSS 7.5 · 0.8% likely

   CWE-98

5. Wholesale Market for WooCommerce < 2.0.0 - Admin+ Arbitrary Log DownloadCVE-2022-4109Cedcommerce · CVSS 2.7 · 0.7% likely

   CWE-22

6. SMSA Shipping for WooCommerce < 1.0.5 - Subscriber+ Arbitrary File DownloadCVE-2022-4107Cedcommerce · CVSS 6.5 · 0.4% likely

   CWE-552

7. WordPress CedCommerce Integration for Good Market plugin <= 1.0.6 - Local File Inclusion vulnerabilityCVE-2025-68877cedcommerce · CVSS 7.5 · 0.3% likely

   CWE-98

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.