The Integration Opvius AI for WooCommerce WordPress plugin versions up to 1.3.0 contains a critical path traversal vulnerability. The process_table_bulk_actions() function lacks authentication checks, nonce verification, and path validation when processing user-supplied file paths. Unauthenticated attackers can exploit this via the wsaw-log[] POST parameter to delete or download arbitrary server files. This vulnerability can be leveraged to delete critical files like wp-config.php or access sensitive configuration data, posing a significant security risk to affected WordPress installations.