Skip to content
OpenAdvisories

Vendor

sldesignpl

2 known vulnerabilities.

Products

Order Attachments for WooCommerce 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.3
    CVE-2024-9756 Public exploit

    Order Attachments for WooCommerce 2.0 - 2.4.1 - Missing Authorization to Authenticated (Subscriber+) Limited Arbitrary File Upload

    The Order Attachments for WooCommerce plugin for WordPress is vulnerable to unauthorized limited arbitrary file uploads due to a missing capability check on the wcoa_add_attachment AJAX action in versions 2.0 to 2.4.1. This makes it possible for authenticated…

    sldesignpl Order Attachments for WooCommerce Web / CMS