The Integration Opvius AI for WooCommerce plugin for WordPress contains a critical path traversal vulnerability affecting all versions up to 1.3.0. The vulnerability exists in the process_table_bulk_actions() function which processes user-supplied file paths without proper authentication checks, nonce verification, or path validation. Unauthenticated attackers can exploit this via the wsaw-log[] POST parameter to delete or download arbitrary files on the server. This can lead to deletion of critical files like wp-config.php or unauthorized access to sensitive configuration files, making it a high-severity security risk for WordPress sites using this plugin.