WP Wham Checkout Files Upload for WooCommerce

• CVE-2026-42725 Medium 6.5 WordPress Checkout Files Upload for WooCommerce plugin <= 2.2.5 - Insecure Direct Object References (IDOR) vulnerability 0.3%
• CVE-2025-39520 Medium 6.5 WordPress Checkout Files Upload for WooCommerce plugin <= 2.2.0 - Cross Site Scripting (XSS) Vulnerability 0.4%