Product Attachment For Woocommerce
Monthly
Unauthorized media file disclosure in the Product Attachment for WooCommerce WordPress plugin (all versions before 2.3.3) allows any unauthenticated internet user to download arbitrary WordPress media library files by enumerating sequential numeric attachment IDs. The plugin's file-streaming endpoint performs no authorization check whatsoever, exposing private or deliberately unlinked uploads - such as internal documents, confidential product specifications, or draft media - to the public. A publicly available proof-of-concept exists per WPScan, though EPSS sits at 0.15% (5th percentile), indicating low observed exploitation rates at time of analysis despite easy weaponization.
Cross-Site Request Forgery (CSRF) vulnerability in theDotstore Product Attachment for WooCommerce plugin <= 2.1.8 versions. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Unauthorized media file disclosure in the Product Attachment for WooCommerce WordPress plugin (all versions before 2.3.3) allows any unauthenticated internet user to download arbitrary WordPress media library files by enumerating sequential numeric attachment IDs. The plugin's file-streaming endpoint performs no authorization check whatsoever, exposing private or deliberately unlinked uploads - such as internal documents, confidential product specifications, or draft media - to the public. A publicly available proof-of-concept exists per WPScan, though EPSS sits at 0.15% (5th percentile), indicating low observed exploitation rates at time of analysis despite easy weaponization.
Cross-Site Request Forgery (CSRF) vulnerability in theDotstore Product Attachment for WooCommerce plugin <= 2.1.8 versions. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.