EUVD-2026-69931

Unauthenticated Sensitive Data Exposure in WooCommerce Product Attachment = 2.3.3 versions...

CVE-2026-81774 WordPress WooCommerce Product Attachment plugin <= 2.3.3 - Sensitive Data Exposure vulnerability

Unauthenticated Sensitive Data Exposure in WooCommerce Product Attachment = 2.3.3 versions...

CVE-2026-81774

CVE-2026-81774 affects the WooCommerce Product Attachment WordPress plugin in versions 2.3.3 and below , introducing an unauthenticated Sensitive Data Exposure vulnerability. The flaw allows a remote, unauthenticated attacker over the network to access confidential data, with a CVSS 3.1 base scor...

PT-2026-84692

Name of the Vulnerable Software and Affected Versions WooCommerce Product Attachment versions prior to 2.3.4 Description An unauthenticated sensitive data exposure issue exists in the plugin, allowing unauthorized users to access protected information. Recommendations Update to a version newer th...

WordPress WooCommerce Product Attachment plugin <= 2.3.3 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by Jakub Herman in WordPress Plugin WooCommerce Product Attachment versions = 2.3.3...

CVE-2026-16285

The CVE-2026-16285 affects the WooCommerce Product Attachment WordPress plugin (prior to version 2.3.3). The root cause is a missing authorization check when streaming media library files, enabling unauthenticated users to download any attachment by enumerating its numeric ID. Impact is stated as...

WordPress WooCommerce Product Attachment Plugin <= 2.1.8 is vulnerable to Cross Site Request Forgery (CSRF)

Software WooCommerce Product Attachment Type Plugin Vulnerable versions = 2.1.8 Fixed in 2.2.0 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-40212 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 8ec007daa0bf Credits Mika...