sldesignpl
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Order Attachments for WooCommerce | 2 | – | Feb 28, 2025 |
Exploited and recent CVEs
- CVE-2024-13638 Order Attachments for WooCommerce <= 2.5.1 - Unauthenticated Sensitive Information Exposure Through Unprotected Directory 0.5%
- CVE-2024-9756 Order Attachments for WooCommerce 2.0 - 2.4.1 - Missing Authorization to Authenticated (Subscriber+) Limited Arbitrary File Upload 0.9%