Product Attachment for WooCommerce vulnerabilities
We track 1 vulnerability in Product Attachment for WooCommerce products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on August 2, 2026.
1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score
Latest Product Attachment for WooCommerce vulnerabilities
- 7.5 High severity
Product Attachment for WooCommerce: Missing Authorization
The Product Attachment for WooCommerce WordPress plugin before 2.3.3 does not perform any authorization check before streaming media library files, allowing unauthenticated users to download any attachment — including private or unlinked uploads — by enumerati