Product Attachment For Woocommerce
Approved changes feed: RSS · Atom
cpe:2.3:a:unknown:product_attachment_for_woocommerce:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Unknown (668ca391-a6cc-5e33-879b-83885214de33) |
|---|---|
| Product | Product Attachment For Woocommerce (9056bc7f-8a4d-5c7c-ae14-52d38d4b5641) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-16285 |
vulnerable | 2026-09-16 04:32:57.171015 |
WooCommerce Product Attachment < 2.3.3 - Unauthenticated Arbitrary Media Download
The Product Attachment for WooCommerce WordPress plugin before 2.3.3 does not perform any authorization check before streaming media library files, allowing unauthenticated users to download any attachment — including private or unlinked uploads — by enumerating its numeric ID.
Published: 2026-08-02T06:00:12.063Z
Updated: 2026-08-03T17:45:32.475Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.