Filtered by vendor Wordpress-extensions
Subscriptions
Filtered by product Woocommerce Product Attachment
Subscriptions
Total
1 CVE
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-16285 | 1 Wordpress-extensions | 1 Woocommerce Product Attachment | 2026-11-11 | 7.5 High |
| The Product Attachment for WooCommerce WordPress plugin before 2.3.3 does not perform any authorization check before streaming media library files, allowing unauthenticated users to download any attachment — including private or unlinked uploads — by enumerating its numeric ID. | ||||
Page 1 of 1.