Veille CVE

Recherche « Unknown Product Attachment for WooCommerce »

1 CVE

Critique 0 Élevée 1 Moyenne 0 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Unknown Product Attachment for WooCommerce » ✕
  1. CVE-2026-16285 7.5 Élevée

    Unknown Product Attachment for WooCommerce

    The Product Attachment for WooCommerce WordPress plugin before 2.3.3 does not perform any authorization check before streaming media library files, allowing unauthenticated users to download any attachment — including private or unlinked uploads — by enumerating its numeric ID.