CVE-2026-81774

Unauthenticated Sensitive Data Exposure in WooCommerce Product Attachment = 2.3.3 versions...

EUVD-2026-69931

Unauthenticated Sensitive Data Exposure in WooCommerce Product Attachment = 2.3.3 versions...

CVE-2026-81774 WordPress WooCommerce Product Attachment plugin <= 2.3.3 - Sensitive Data Exposure vulnerability

Unauthenticated Sensitive Data Exposure in WooCommerce Product Attachment = 2.3.3 versions...

CVE-2026-81774 WordPress WooCommerce Product Attachment plugin <= 2.3.3 - Sensitive Data Exposure vulnerability

Unauthenticated Sensitive Data Exposure in WooCommerce Product Attachment = 2.3.3 versions...

CVE-2026-81774

CVE-2026-81774 affects the WooCommerce Product Attachment WordPress plugin in versions 2.3.3 and below , introducing an unauthenticated Sensitive Data Exposure vulnerability. The flaw allows a remote, unauthenticated attacker over the network to access confidential data, with a CVSS 3.1 base scor...

CVE-2026-81774: Exposure of Sensitive System Information to an Unauthorized Control Sphere

Unauthenticated Sensitive Data Exposure in WooCommerce Product Attachment = 2.3.3 versions...

PT-2026-84692

Name of the Vulnerable Software and Affected Versions WooCommerce Product Attachment versions prior to 2.3.4 Description An unauthenticated sensitive data exposure issue exists in the plugin, allowing unauthorized users to access protected information. Recommendations Update to a version newer th...

WordPress WooCommerce Product Attachment plugin <= 2.3.3 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by Jakub Herman in WordPress Plugin WooCommerce Product Attachment versions = 2.3.3...

CVE-2026-16285

The Product Attachment for WooCommerce WordPress plugin versions before 2.3.3 is vulnerable to an unauthenticated arbitrary media download . The root cause is a missing authorization check when streaming media library files, which allows attackers to download any attachment—including private or u...

WordPress Product Attachment for WooCommerce plugin < 2.3.3 - Unauthenticated Arbitrary Media Download vulnerability

Unauthenticated Arbitrary Media Download vulnerability discovered by kevin@OPCIA in WordPress Plugin WooCommerce Product Attachment versions 2.3.3...

WordPress WooCommerce Product Attachment Plugin <= 2.1.8 is vulnerable to Cross Site Request Forgery (CSRF)

Software WooCommerce Product Attachment Type Plugin Vulnerable versions = 2.1.8 Fixed in 2.2.0 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-40212 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 8ec007daa0bf Credits Mika...