Skip to content
OpenAdvisories

Vendor

Snowray Software

2 known vulnerabilities.

Products

File Uploader for WooCommerce 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2025-13329

    File Uploader for WooCommerce <= 1.0.3 - Unauthenticated Arbitrary File Upload via add-image-data

    The File Uploader for WooCommerce plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the callback function for the 'add-image-data' REST API endpoint in all versions up to, and including, 1.0.3. This makes it p…

    Snowray Software File Uploader for WooCommerce Web / CMS