CVE-2026-81774

Unauthenticated Sensitive Data Exposure in WooCommerce Product Attachment = 2.3.3 versions...

EUVD-2026-69931

Unauthenticated Sensitive Data Exposure in WooCommerce Product Attachment = 2.3.3 versions...

CVE-2026-81774

CVE-2026-81774 affects the WooCommerce Product Attachment WordPress plugin in versions 2.3.3 and below , introducing an unauthenticated Sensitive Data Exposure vulnerability. The flaw allows a remote, unauthenticated attacker over the network to access confidential data, with a CVSS 3.1 base scor...

CVE-2026-81774 WordPress WooCommerce Product Attachment plugin <= 2.3.3 - Sensitive Data Exposure vulnerability

Unauthenticated Sensitive Data Exposure in WooCommerce Product Attachment = 2.3.3 versions...

CVE-2026-81774 WordPress WooCommerce Product Attachment plugin <= 2.3.3 - Sensitive Data Exposure vulnerability

Unauthenticated Sensitive Data Exposure in WooCommerce Product Attachment = 2.3.3 versions...

CVE-2026-81774: Exposure of Sensitive System Information to an Unauthorized Control Sphere

Unauthenticated Sensitive Data Exposure in WooCommerce Product Attachment = 2.3.3 versions...

PT-2026-84692

Name of the Vulnerable Software and Affected Versions WooCommerce Product Attachment versions prior to 2.3.4 Description An unauthenticated sensitive data exposure issue exists in the plugin, allowing unauthorized users to access protected information. Recommendations Update to a version newer th...

WordPress WooCommerce Product Attachment plugin <= 2.3.3 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by Jakub Herman in WordPress Plugin WooCommerce Product Attachment versions = 2.3.3...

EUVD-2026-51945

The Product Attachment for WooCommerce WordPress plugin before 2.3.3 does not perform any authorization check before streaming media library files, allowing unauthenticated users to download any attachment — including private or unlinked uploads — by enumerating its numeric ID...

CVE-2026-16285 WooCommerce Product Attachment < 2.3.3 - Unauthenticated Arbitrary Media Download

The Product Attachment for WooCommerce WordPress plugin before 2.3.3 does not perform any authorization check before streaming media library files, allowing unauthenticated users to download any attachment — including private or unlinked uploads — by enumerating its numeric ID...

WordPress Product Attachment for WooCommerce plugin < 2.3.3 - Unauthenticated Arbitrary Media Download vulnerability

Unauthenticated Arbitrary Media Download vulnerability discovered by kevin@OPCIA in WordPress Plugin WooCommerce Product Attachment versions 2.3.3...

CVE-2026-16285

The Product Attachment for WooCommerce WordPress plugin before 2.3.3 does not perform any authorization check before streaming media library files, allowing unauthenticated users to download any attachment — including private or unlinked uploads — by enumerating its numeric ID...

CVE-2026-16285 WooCommerce Product Attachment < 2.3.3 - Unauthenticated Arbitrary Media Download

The Product Attachment for WooCommerce WordPress plugin before 2.3.3 does not perform any authorization check before streaming media library files, allowing unauthenticated users to download any attachment — including private or unlinked uploads — by enumerating its numeric ID...

CVE-2026-16285

The Product Attachment for WooCommerce WordPress plugin before 2.3.3 does not perform any authorization check before streaming media library files, allowing unauthenticated users to download any attachment — including private or unlinked uploads — by enumerating its numeric ID...

CVE-2026-16285: Missing Authorization

The Product Attachment for WooCommerce WordPress plugin before 2.3.3 does not perform any authorization check before streaming media library files, allowing unauthenticated users to download any attachment — including private or unlinked uploads — by enumerating its numeric ID...

WooCommerce Product Attachment < 2.2.0 - Checkout Attachements Update via CSRF

Description The plugin does not have CSRF check when saving checkout attachements, which could allow attackers to make logged in users perform such action via a CSRF attack...

CVE-2023-40212

Cross-Site Request Forgery CSRF vulnerability in theDotstore Product Attachment for WooCommerce plugin = 2.1.8 versions...

CVE-2023-40212

Cross-Site Request Forgery CSRF vulnerability in theDotstore Product Attachment for WooCommerce plugin = 2.1.8 versions...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in theDotstore Product Attachment for WooCommerce plugin = 2.1.8 versions...

CVE-2023-40212 WordPress WooCommerce Product Attachment Plugin <= 2.1.8 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in theDotstore Product Attachment for WooCommerce plugin = 2.1.8 versions...