CVE-2026-13607
File Uploads Addon for WooCommerce <= 1.7.6 - Unauthenticated Direct File Access
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
The File Uploads Addon for WooCommerce WordPress plugin through 1.7.6 stores customer-uploaded files in a publicly web-accessible uploads directory and the access restriction it generates is ineffective, so an unauthenticated attacker who knows or guesses a file's name can retrieve customer-uploaded files directly, bypassing the File Uploads Addon for WooCommerce WordPress plugin through 1.7.6's authenticated download mechanism.
| Vendor | unknown |
| Product | file uploads addon for woocommerce |
| Published | Oct 5, 2026 |
Stay Ahead of the Next One
Get instant alerts for unknown file uploads addon for woocommerce
Be the first to know when new unknown vulnerabilities affecting unknown file uploads addon for woocommerce are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Unknown / File Uploads Addon for WooCommerce
1.7.2 ≤ 1.7.6
References
Credits
J4ck13Ch4n WPScan