CVE-2026-16285

The Product Attachment for WooCommerce WordPress plugin before 2.3.3 does not perform any authorization check before streaming media library files, allowing unauthenticated users to download any attachment — including private or unlinked uploads — by enumerating its numeric ID...

CVE-2025-62907

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in aviplugins.com Custom Post Type Attachment custom-post-type-pdf-attachment allows Stored XSS.This issue affects Custom Post Type Attachment: from n/a through = 3.4.6...

CVE-2025-62907 WordPress Custom Post Type Attachment plugin <= 3.4.6 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in aviplugins.com Custom Post Type Attachment custom-post-type-pdf-attachment allows Stored XSS.This issue affects Custom Post Type Attachment: from n/a through = 3.4.6...

CVE-2025-62907

CVE-2025-62907 applies to the WordPress plugin Custom Post Type Attachment

CVE-2025-62907 WordPress Custom Post Type Attachment plugin <= 3.4.6 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in aviplugins.com Custom Post Type Attachment custom-post-type-pdf-attachment allows Stored XSS.This issue affects Custom Post Type Attachment: from n/a through = 3.4.6...

EUVD-2013-5840

Malware in sbrugna...

WordPress Medical Prescription Attachment Plugin for WooCommerce Code Issue Vulnerability

WordPress Medical Prescription Attachment Plugin for WooCommerce is a plugin designed for WooCommerce, mainly used to help online pharmacies to realize the function of customers uploading doctor's prescription files in order to purchase medicines, vaccines and so on. WordPress Medical Prescriptio...

CVE-2025-29009

CVE-2025-29009 affects the WordPress plugin Medical Prescription Attachment Plugin for WooCommerce (versions n/a through 1.2.3). The issue is an Unrestricted Upload of File with Dangerous Type vulnerability in the plugin, enabling an unauthenticated attacker to upload a web shell to the web serve...

CVE-2013-6010

CVE-2013-6010 is an XSS vulnerability in the WordPress Comment Attachment plugin (version 1.0). The issue allows injection of arbitrary script/HTML via the Attachment field title. Exploitation details are not provided in the connected documents, but multiple sources confirm the plugin 1.0 XSS beh...