https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-06T09:51:33.063276+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2026-78371 CVE-2026-78371 — File Uploads Addon for WooCommerce 1.7.2 - 1.7.5 - Unauthenticated Customer Uploaded File Disclosure 2026-10-06T09:51:33.064876+00:00

Affected: Unknown File Uploads Addon for WooCommerce

The File Uploads Addon for WooCommerce WordPress plugin before 1.7.6 does not verify that the person requesting a customer-uploaded file is the customer who uploaded it, allowing unauthenticated attackers who know or guess a file's name to download other customers' uploaded files.