Veille CVE

Recherche « Unknown File Uploads Addon for WooCommerce »

2 CVE

Critique 0 Élevée 0 Moyenne 2 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Unknown File Uploads Addon for WooCommerce » ✕
  1. CVE-2026-78371 5.9 Moyenne

    Unknown File Uploads Addon for WooCommerce

    The File Uploads Addon for WooCommerce WordPress plugin before 1.7.6 does not verify that the person requesting a customer-uploaded file is the customer who uploaded it, allowing unauthenticated attackers who know or guess a file's name to download other customers' uploaded files.

  2. CVE-2026-13607 5.9 Moyenne

    Unknown File Uploads Addon for WooCommerce

    The File Uploads Addon for WooCommerce WordPress plugin through 1.7.6 stores customer-uploaded files in a publicly web-accessible uploads directory and the access restriction it generates is ineffective, so an unauthenticated attacker who knows or guesses a file's name can retrieve customer-uploaded files directly, bypassing the File Uploads Addon for WooCommerce WordPress plugin through 1.7.6's authenticated download mechanism.