Description
The Product Attachment for WooCommerce WordPress plugin before 2.3.3 does not perform any authorization check before streaming media library files, allowing unauthenticated users to download any attachment — including private or unlinked uploads — by enumerating its numeric ID.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Product Attachment for WooCommerce | < 2.3.3 | 2.3.3 |
References
- https://wpscan.com/vulnerability/99a3a0a4-0e82-4388-88b2-72bd822904b5/ exploit vdb-entry technical-description