Threats tagged 'ghsa-953r-r7wf-54g9'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	7.5	EPSS 0.4%	CVE-2026-16285Product Attachment for WooCommerce (WordPress plugin) · Missing Authorization High7.5EPSS 0.4%2026-08-02CVE Database V5CVE-2026-16285 A missing authorization vulnerability in the Product Attachment for WooCommerce WordPress plugin before version 2.3.3 allows unauthenticated users to download any media library file by enumerating numeric IDs. This includes private or unlinked uploads, exposing potentially sensitive files without requiring authentication. EPSS 0.4%Vulnerability CWE-862 #ghsa-953r-r7wf-54g9	CVE Database V5	2026-08-02

Page 1 of 1